PT-2017-15320 · Wn · Wn-Ax1167Gr

Taizoh Tsukamoto · Published 2017-08-02 · Updated 2017-08-08 · CVE-2017-2280

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WN-AX1167GR firmware versions 3.00 and earlier

Description The issue allows an attacker with device access to execute arbitrary code on the device due to the use of hardcoded credentials.

Recommendations For WN-AX1167GR firmware versions 3.00 and earlier, update to a version later than 3.00 to resolve the issue.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2017-2280

Affected Products

Wn-Ax1167Gr

References · 4

• http://iodata.jp/support/information/2017/wn-ax1167gr · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-2280 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-2280 · Security Note
• https://jvn.jp/en/jp/JVN01312667/index.html · Note