CVE-2016-1137

Опубликовано: 30 янв. 2016

Источник: nvd

CVSS3: 7.4

CVSS2: 5.8

EPSS Низкий

Описание

Open redirect vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Комментарий

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Ссылки

http://jvn.jp/en/jp/JVN54686544/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000008
Vendor Advisory
http://www.au.kddi.com/mobile/service/smartphone/wifi/homespot/#anc06
Vendor Advisory
http://jvn.jp/en/jp/JVN54686544/index.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000008
Vendor Advisory
http://www.au.kddi.com/mobile/service/smartphone/wifi/homespot/#anc06
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:kddi:home_spot_cube_firmware:2.0:*:*:*:*:*:*:*

cpe:2.3:h:kddi:home_spot_cube:*:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00274

Низкий

7.4 High

CVSS3

5.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-x8m3-wg5g-g8j5