PT-2019-8697 · Buffalo · Bn-Sdwbp3

Taizoh Tsukamoto · Publicado 2019-01-09 · Atualizado 2019-02-11 · CVE-2018-0676

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BN-SDWBP3 firmware versions 1.0.9 and earlier

Description The issue allows an attacker on the same network segment to bypass authentication and access the management screen, where they can execute an arbitrary command. The exact vectors used for this exploitation are not specified.

Recommendations For BN-SDWBP3 firmware versions 1.0.9 and earlier, update to a version later than 1.0.9 to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-0676

Produtos afetados

Bn-Sdwbp3

Referências · 4

• https://jvn.jp/en/jp/JVN65082538/index.html · Nota
• https://osv.dev/vulnerability/CVE-2018-0676 · Aviso do Fabricante
• https://p3.support.panasonic.com/faq/show/5017?&site_domain=p3 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-0676 · Nota de Segurança