8.8
CVE-2018-16219
- EPSS 0.18%
- Veröffentlicht 25.04.2019 20:29:01
- Zuletzt bearbeitet 21.11.2024 03:52:18
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginA missing password verification in the web interface in AudioCodes 405HD VoIP phone with firmware 2.2.12 allows an remote attacker (in the same network as the device) to change the admin password without authentication via a POST request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Audiocodes ≫ 405hd Firmware Version2.2.12
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.18% | 0.401 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 3.3 | 6.5 | 2.9 |
AV:A/AC:L/Au:N/C:N/I:P/A:N
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.