CVE-2019-6551

Опубликовано: 28 фев. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafted URL to cause the device to reboot, which may be used to cause a continual denial-of-service condition.

Ссылки

http://www.securityfocus.com/bid/107031
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-045-01
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/107031
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-045-01
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:pangea-comm:fax_ata:*:*:*:*:*:*:*:*

Версия до 3.1.8 (включая)

EPSS

Процентиль: 76%

0.0098

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-288

CWE-425

Связанные уязвимости

GHSA-xgfw-p7jc-xwr2