PT-2014-3574 · Virtual Access · Virtual Access Gw6110A Router

James Premo · Published 2014-03-25 · Updated 2014-03-26 · CVE-2014-0343

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:A/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Virtual Access GW6110A router versions 9.00 through 9.09.26 Virtual Access GW6110A router versions 9.50 through 9.50.20 Virtual Access GW6110A router versions 10.00 through 10.00.20

Description The issue allows remote authenticated users to gain privileges via a modified JavaScript variable.

Recommendations For versions 9.00 through 9.09.26, update to version 9.09.27 or later. For versions 9.50 through 9.50.20, update to version 9.50.21 or later. For versions 10.00 through 10.00.20, update to version 10.00.21 or later.

Fix

Related Identifiers

CVE-2014-0343

Affected Products

Virtual Access Gw6110A Router

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-0343 · Security Note
• http://kb.cert.org/vuls/id/213046 · Note