Описание
An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the SMS logs from an unauthenticated perspective.
Ссылки
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryURL Repurposed
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryURL Repurposed
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:sendquick:entera_sms_gateway_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sendquick:entera_sms_gateway:-:*:*:*:*:*:*:*
Конфигурация 2
Одновременно
cpe:2.3:o:sendquick:avera_sms_gateway_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:sendquick:avera_sms_gateway:-:*:*:*:*:*:*:*
EPSS
Процентиль: 54%
0.00316
Низкий
6.2 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-532
Связанные уязвимости
CVSS3: 6.2
github
больше 3 лет назад
An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the SMS logs from an unauthenticated perspective.
EPSS
Процентиль: 54%
0.00316
Низкий
6.2 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-532