PT-1998-1212 · Nbase · Nh215+1

Published 1998-07-20 · Updated 2016-10-18 · CVE-1999-1421

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions NBase switches NH208 and NH215

Description The issue allows remote attackers to send software updates to the switch, potentially modifying it or causing a denial of service by guessing the target filenames, which have default names.

Recommendations For NBase switches NH208 and NH215, consider restricting access to the TFTP server to prevent unauthorized software updates until a patch is available. As a temporary workaround, changing the default filenames of the target software updates may help minimize the risk of exploitation.

Fix

Related Identifiers

CVE-1999-1421

Affected Products

Nh208

Nh215

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-1421 · Security Note
• http://marc.info/?l=bugtraq&m=90221104526065&w=2 · Note
• http://securityfocus.com/bid/212 · Note
• http://marc.info/?l=bugtraq&m=90221104526016&w=2 · Note