PT-2017-7717 · Arcadyan · Arcadyan Slt-00 Star

Mateusz Khalil · Publicado 2017-06-29 · Atualizado 2017-07-07 · CVE-2016-10042

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Arcadyan SLT-00 Star* (aka Swisscom Internet-Box) versions prior to R7.7

Description The issue allows for an authorization bypass in the web interface, enabling unauthorized reconfiguration of the static routing table through an unauthenticated HTTP request. This can lead to denial of service and information disclosure.

Recommendations For versions prior to R7.7, update to version R7.7 or later to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-10042

Produtos afetados

Arcadyan Slt-00 Star

Referências · 2

• https://swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2016-10042.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-10042 · Nota de Segurança