PT-2018-11742 · Buffalo · Buffalo Ts5600D1206

Publicado 2018-11-26 · Atualizado 2018-12-31 · CVE-2018-13319

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Buffalo TS5600D1206 version 3.61-0.10

Description The issue allows attackers to determine sensitive device information via an unauthenticated POST request due to incorrect access control in the get portal info function.

Recommendations For Buffalo TS5600D1206 version 3.61-0.10, consider restricting access to the get portal info function until a patch is available.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-13319

Produtos afetados

Buffalo Ts5600D1206

Referências · 3

• 🔥 https://blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d · Exploit
• https://osv.dev/vulnerability/CVE-2018-13319 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-13319 · Nota de Segurança