PT-1998-1212 · Nbase · Nh215+1

Publicado 1998-07-20 · Atualizado 2016-10-18 · CVE-1999-1421

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions NBase switches NH208 and NH215

Description The issue allows remote attackers to send software updates to the switch, potentially modifying it or causing a denial of service by guessing the target filenames, which have default names.

Recommendations For NBase switches NH208 and NH215, consider restricting access to the TFTP server to prevent unauthorized software updates until a patch is available. As a temporary workaround, changing the default filenames of the target software updates may help minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-1999-1421

Produtos afetados

Nh208

Nh215

Referências · 4

• http://marc.info/?l=bugtraq&m=90221104526065&w=2 · Nota
• http://securityfocus.com/bid/212 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1421 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=90221104526016&w=2 · Nota