10

CVE-2014-6436

Exploit

EPSS 14.75%
Veröffentlicht 12.01.2018 17:29:00
Zuletzt bearbeitet 21.11.2024 02:14:22
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Aztech ≫ Adsl Dsl5018en (1t1r) Firmware Version-

Aztech ≫ Adsl Dsl5018en (1t1r) Version-

Aztech ≫ Dsl705e Firmware Version-

Aztech ≫ Dsl705e Version-

Aztech ≫ Dsl705eu Firmware Version-

Aztech ≫ Dsl705eu Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	14.75%	0.942

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://packetstormsecurity.com/files/128254/Aztech-DSL5018EN-DSL705E-DSL705EU-DoS-Broken-Session-Management.html

Third Party Advisory

Exploit

VDB Entry

http://www.securityfocus.com/archive/1/533489/100/0/threaded

http://www.securityfocus.com/bid/69811

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2014-6436

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-6436

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-6436

EUVD