PT-2016-4642 · I O Data · Wn-Gdn/R3-C+3

Takaaki Minegishi + 1 · Publicado 2016-05-14 · Atualizado 2016-05-18 · CVE-2016-1206

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices (affected versions not specified)

Description The issue concerns the WPS implementation, which does not limit PIN guesses. This allows remote attackers to obtain network access via a brute-force attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-1206

Produtos afetados

Wn-Gdn/R3

Wn-Gdn/R3-C

Wn-Gdn/R3-S

Wn-Gdn/R3-U

Referências · 4

• http://jvn.jp/en/jp/JVN25674893/index.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1206 · Nota de Segurança
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000061 · Aviso do Fabricante
• http://iodata.jp/support/information/2016/wn-gdnr3_bfa · Aviso do Fabricante