PT-2017-17811 · Dragonwave · Dragonwave Horizon

Publicado 2017-04-06 · Atualizado 2021-09-13 · CVE-2017-7576

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DragonWave Horizon versions 1.01.03 through 1.4.7

Description The issue concerns hardcoded login credentials in the DragonWave Horizon wireless radios, including a username of energetic and a password of wireless. These credentials can be used to access the devices via the web interface or by connecting through TELNET.

Recommendations For versions 1.01.03 through 1.4.7, update to version 1.4.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the web interface and TELNET to minimize the risk of exploitation.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2017-7576

Produtos afetados

Dragonwave Horizon

Referências · 4

• http://blog.iancaling.com/post/159276197313 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-7576 · Nota de Segurança
• https://t.me/cvenotify/20744 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2017-7576 · Aviso do Fabricante