PT-2015-6030 · I O Data · Np-Bbrs+1

Published 2015-08-22 · Updated 2016-11-28 · CVE-2015-2984

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions I-O DATA DEVICE WN-G54/R2 versions prior to 1.03 I-O DATA DEVICE NP-BBRS (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service via UPnP requests, specifically through SSDP reflection.

Recommendations For I-O DATA DEVICE WN-G54/R2 versions prior to 1.03, update the firmware to version 1.03 or later. For I-O DATA DEVICE NP-BBRS, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-2984

Affected Products

Np-Bbrs

Wn-G54/R2

References · 5

• http://jvn.jp/en/jp/JVN17964918/index.html · Vendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000117 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-2984 · Security Note
• http://iodata.jp/support/information/2015/wn-g54r2 · Vendor Advisory
• http://securityfocus.com/bid/76393 · Note