CVE-2018-0676

Опубликовано: 09 янв. 2019

Источник: nvd

CVSS3: 8.8

CVSS2: 5.8

EPSS Низкий

Описание

BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to bypass authentication to access to the management screen and execute an arbitrary command via unspecified vectors.

Ссылки

https://jvn.jp/en/jp/JVN65082538/index.html
Third Party Advisory
https://p3.support.panasonic.com/faq/show/5017?&site_domain=p3
Vendor Advisory
https://jvn.jp/en/jp/JVN65082538/index.html
Third Party Advisory
https://p3.support.panasonic.com/faq/show/5017?&site_domain=p3
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:panasonic:bn-sdwbp3_firmware:*:*:*:*:*:*:*:*

Версия до 1.0.9 (включая)

cpe:2.3:h:panasonic:bn-sdwbp3:-:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00162

Низкий

8.8 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-gfjg-c4fv-56hq