PT-2011-4809 · Opengear · Opengear Console Servers

Tadayoshi Nakahira · Publicado 2011-11-09 · Atualizado 2011-11-16 · CVE-2011-3997

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Opengear console servers versions prior to 2.2.1

Description The issue allows remote attackers to bypass authentication and modify settings or access connected equipment.

Recommendations For versions prior to 2.2.1, update the firmware to version 2.2.1 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2011-3997

Produtos afetados

Opengear Console Servers

Referências · 3

• http://jvn.jp/en/jp/JVN71349007/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-3997 · Nota de Segurança
• http://jvndb.jvn.jp/jvndb/JVNDB-2011-000096 · Nota