CVE-2017-6205

Опубликовано: 23 фев. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to conduct Unauthenticated Command Bypass attacks via unspecified vectors.

Ссылки

http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10070
Patch
Vendor Advisory
http://www.securityfocus.com/bid/96397
http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10070
Patch
Vendor Advisory
http://www.securityfocus.com/bid/96397

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dlink:websmart_dgs-1510_series_firmware:*:*:*:*:*:*:*:*

Версия до 1.31.b001 (включая)

Одно из

cpe:2.3:h:dlink:websmart_dgs-1510-20:-:*:*:*:*:*:*:*

cpe:2.3:h:dlink:websmart_dgs-1510-28:-:*:*:*:*:*:*:*

cpe:2.3:h:dlink:websmart_dgs-1510-28p:-:*:*:*:*:*:*:*

cpe:2.3:h:dlink:websmart_dgs-1510-28xmp:-:*:*:*:*:*:*:*

cpe:2.3:h:dlink:websmart_dgs-1510-52:-:*:*:*:*:*:*:*

cpe:2.3:h:dlink:websmart_dgs-1510-52x:-:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02353

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-vwx5-7mgr-447q