10

CVE-2017-7928

An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versions R202 and, R203, R203-V1, R203-V2 and, R204, R204-V1. The device does not properly enforce access control while configured for NAT port forwarding, which may allow for unauthorized communications to downstream devices.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Selinc ≫ Sel-3620 Firmware Version r202
   Selinc ≫ Sel-3620 Version -
Selinc ≫ Sel-3620 Firmware Version r203
   Selinc ≫ Sel-3620 Version -
Selinc ≫ Sel-3620 Firmware Version r203-v
   Selinc ≫ Sel-3620 Version -
Selinc ≫ Sel-3620 Firmware Version r203-v1
   Selinc ≫ Sel-3620 Version -
Selinc ≫ Sel-3620 Firmware Version r204
   Selinc ≫ Sel-3620 Version -
Selinc ≫ Sel-3620 Firmware Version r204-v1
   Selinc ≫ Sel-3620 Version -
Selinc ≫ Sel-3622 Firmware Version r202
   Selinc ≫ Sel-3622 Version -
Selinc ≫ Sel-3622 Firmware Version r203
   Selinc ≫ Sel-3622 Version -
Selinc ≫ Sel-3622 Firmware Version r203-v
   Selinc ≫ Sel-3622 Version -
Selinc ≫ Sel-3622 Firmware Version r203-v1
   Selinc ≫ Sel-3622 Version -
Selinc ≫ Sel-3622 Firmware Version r204
   Selinc ≫ Sel-3622 Version -
Selinc ≫ Sel-3622 Firmware Version r204-v1
   Selinc ≫ Sel-3622 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.27% 0.808
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 3.9 6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://www.securityfocus.com/bid/99536
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-192-06
Third Party Advisory
US Government Resource
Mitigation