PT-2017-16334 · Sendquick+1 · Sendquick Entera+1

Published 2017-02-05 · Updated 2024-02-14 · CVE-2017-5137

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SendQuick Entera versions prior to 2HF16 Avera versions prior to 2HF16

Description An issue allows an attacker to request and download SMS logs without authentication.

Recommendations For SendQuick Entera versions prior to 2HF16, update to version 2HF16 or later to resolve the issue. For Avera versions prior to 2HF16, update to version 2HF16 or later to resolve the issue.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2017-5137

Affected Products

Avera

Sendquick Entera

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-5137 · Security Note
• https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances · Note
• http://securityfocus.com/bid/96031 · Note