CVE-2018-10618

Опубликовано: 01 авг. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 5

EPSS Средний

Описание

Davolink DVW-3200N all version prior to Version 1.00.06. The device generates a weak password hash that is easily cracked, allowing a remote attacker to obtain the password for the device.

Ссылки

http://www.securityfocus.com/bid/104940
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-212-01
Mitigation
Third Party Advisory
US Government Resource
https://www.exploit-db.com/exploits/45076/
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/104940
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-212-01
Mitigation
Third Party Advisory
US Government Resource
https://www.exploit-db.com/exploits/45076/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:davolink:dvw-3200n_firmware:*:*:*:*:*:*:*:*

Версия до 1.00.06 (исключая)

cpe:2.3:h:davolink:dvw-3200n:-:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.19279

Средний

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-916

Связанные уязвимости

GHSA-f6xc-rcx3-3c9h