Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-18661

Опубликовано: 02 нояб. 2019
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain check_pwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:fastweb:fastgate_firmware:1.0.1b:*:*:*:*:*:*:*
cpe:2.3:h:fastweb:fastgate:-:*:*:*:*:*:*:*

EPSS

Процентиль: 47%
0.00245
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

github
больше 3 лет назад

Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain check_pwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console.

EPSS

Процентиль: 47%
0.00245
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-287