PT-2017-16333 · Sendquick+1 · Sendquick Entera+1

Published 2017-02-05 · Updated 2024-02-14 · CVE-2017-5136

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SendQuick Entera versions prior to 2HF16 Avera versions prior to 2HF16

Description An issue was discovered where the application failed to check the access control of the request, which could result in an attacker being able to shutdown the system.

Recommendations For SendQuick Entera versions prior to 2HF16, update to version 2HF16 or later. For Avera versions prior to 2HF16, update to version 2HF16 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2017-5136

Affected Products

Avera

Sendquick Entera

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-5136 · Security Note
• https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances · Note
• http://securityfocus.com/bid/96031 · Note