PT-2017-7378 · Seawell Networks · Seawell Networks Spectrum Sdc

Karn Ganeshen · Publicado 2017-04-13 · Atualizado 2017-04-19 · CVE-2015-8284

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SeaWell Networks Spectrum SDC version 02.05.00

Description The issue allows remote viewer users to perform administrative functions, which could lead to unauthorized access and control.

Recommendations For SeaWell Networks Spectrum SDC version 02.05.00, update to a newer version that addresses this issue, if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2015-8284

Produtos afetados

Seawell Networks Spectrum Sdc

Referências · 4

• 🔥 http://packetstormsecurity.com/files/135311/SeaWell-Networks-Spectrum-SDC-02.05.00-Traversal-Privilege-Escalation.html · Exploit
• 🔥 https://exploit-db.com/exploits/39266 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-8284 · Nota de Segurança
• http://seclists.org/fulldisclosure/2016/Jan/58 · Nota