PT-2014-3574 · Virtual Access · Virtual Access Gw6110A Router

James Premo · Publicado 2014-03-25 · Atualizado 2014-03-26 · CVE-2014-0343

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:A/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Virtual Access GW6110A router versions 9.00 through 9.09.26 Virtual Access GW6110A router versions 9.50 through 9.50.20 Virtual Access GW6110A router versions 10.00 through 10.00.20

Description The issue allows remote authenticated users to gain privileges via a modified JavaScript variable.

Recommendations For versions 9.00 through 9.09.26, update to version 9.09.27 or later. For versions 9.50 through 9.50.20, update to version 9.50.21 or later. For versions 10.00 through 10.00.20, update to version 10.00.21 or later.

Correção

Identificadores relacionados

CVE-2014-0343

Produtos afetados

Virtual Access Gw6110A Router

Referências · 2

• http://kb.cert.org/vuls/id/213046 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0343 · Nota de Segurança