PT-2016-4642 · I O Data · Wn-Gdn/R3-C+3

Takaaki Minegishi + 1 · Published 2016-05-14 · Updated 2016-05-18 · CVE-2016-1206

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices (affected versions not specified)

Description The issue concerns the WPS implementation, which does not limit PIN guesses. This allows remote attackers to obtain network access via a brute-force attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-1206

Affected Products

Wn-Gdn/R3

Wn-Gdn/R3-C

Wn-Gdn/R3-S

Wn-Gdn/R3-U

References · 4

• http://jvn.jp/en/jp/JVN25674893/index.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1206 · Security Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000061 · Vendor Advisory
• http://iodata.jp/support/information/2016/wn-gdnr3_bfa · Vendor Advisory