7.5
CVE-2011-3997
- EPSS 1.37%
- Veröffentlicht 09.11.2011 20:55:01
- Zuletzt bearbeitet 16.06.2026 23:34:16
- Quelle vultures@jpcert.or.jp
- CVE-Watchlists
- Unerledigt
LoginOpengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected equipment, via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Opengear ≫ Opengear Console Server Firmware Version <= 2.1.0u7
Opengear ≫ Opengear Console Server Firmware Version2.0.4
Opengear ≫ Opengear Console Server Firmware Version2.0.4u1
Opengear ≫ Opengear Console Server Firmware Version2.0.6
Opengear ≫ Opengear Console Server Firmware Version2.0.8
Opengear ≫ Opengear Console Server Firmware Version2.0.9
Opengear ≫ Opengear Console Server Firmware Version2.1.0
Opengear ≫ Opengear Console Server Firmware Version2.1.0u1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.37% | 0.683 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
http://jvn.jp/en/jp/JVN71349007/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000096