CVE-2014-6436

Опубликовано: 12 янв. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Средний

Описание

Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login.

Ссылки

http://packetstormsecurity.com/files/128254/Aztech-DSL5018EN-DSL705E-DSL705EU-DoS-Broken-Session-Management.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/533489/100/0/threaded
http://www.securityfocus.com/bid/69811
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/128254/Aztech-DSL5018EN-DSL705E-DSL705EU-DoS-Broken-Session-Management.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/533489/100/0/threaded
http://www.securityfocus.com/bid/69811
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:aztech:adsl_dsl5018en_\(1t1r\)_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:aztech:adsl_dsl5018en_\(1t1r\):-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:aztech:dsl705e_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:aztech:dsl705e:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:aztech:dsl705eu_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:aztech:dsl705eu:-:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.14747

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-xg87-92r7-2r8m

CVSS3: 9.8

github

больше 3 лет назад

EPSS

Процентиль: 94%

0.14747

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-287