CVE-2016-7820

Опубликовано: 09 июн. 2017

Источник: nvd

CVSS3: 7.2

CVSS2: 9

EPSS Низкий

Описание

Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to cause a denial-of-service (DoS) or execute arbitrary code via unspecified vectors.

Ссылки

http://www.iodata.jp/support/information/2016/ts-wrlap_2/
Vendor Advisory
http://www.securityfocus.com/bid/94594
Third Party Advisory
Vendor Advisory
https://jvn.jp/en/jp/JVN25059363/index.html
Third Party Advisory
VDB Entry
http://www.iodata.jp/support/information/2016/ts-wrlap_2/
Vendor Advisory
http://www.securityfocus.com/bid/94594
Third Party Advisory
Vendor Advisory
https://jvn.jp/en/jp/JVN25059363/index.html
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:iodata:ts-wrlp_firmware:*:*:*:*:*:*:*:*

Версия до 1.01.02 (включая)

cpe:2.3:h:iodata:ts-wrlp:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:iodata:ts-wrla_firmware:*:*:*:*:*:*:*:*

Версия до 1.01.02 (включая)

cpe:2.3:h:iodata:ts-wrla:-:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01225

Низкий

7.2 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-3v99-rpgw-rrch