PT-2018-12984 · Kraftway · Kraftway 24F2Xg Router

Alexander Nochvay · Publicado 2018-08-17 · Atualizado 2019-10-03 · CVE-2018-15350

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kraftway 24F2XG Router firmware version 3.5.30.1118

Description The issue allows remote attackers to gain privileged access to the router due to default credentials.

Recommendations For firmware version 3.5.30.1118, change the default credentials to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-1188

Identificadores relacionados

CVE-2018-15350

Produtos afetados

Kraftway 24F2Xg Router

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-15350 · Nota de Segurança
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-006-kraftway-24f2xg-router-default-credentials · Nota
• https://osv.dev/vulnerability/CVE-2018-15350 · Aviso do Fabricante