PT-2018-12989 · Kraftway · Kraftway 24F2Xg Router

Alexander Nochvay · Publicado 2018-08-17 · Atualizado 2019-10-03 · CVE-2018-15355

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kraftway 24F2XG Router firmware version 3.5.30.1118

Description The issue concerns the usage of outdated SSL protocols, specifically SSLv2 and SSLv3, which can lead to the decryption of transmitted data.

Recommendations For firmware version 3.5.30.1118, consider disabling the use of SSLv2 and SSLv3 protocols to prevent data decryption until a patch or update is available.

Correção

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-327

Identificadores relacionados

CVE-2018-15355

Produtos afetados

Kraftway 24F2Xg Router

Referências · 3

• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-011-kraftway-24f2xg-router-outdated-certificate-usage · Nota
• https://osv.dev/vulnerability/CVE-2018-15355 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-15355 · Nota de Segurança