PT-2017-7378 · Seawell Networks · Seawell Networks Spectrum Sdc

Karn Ganeshen · Published 2017-04-13 · Updated 2017-04-19 · CVE-2015-8284

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SeaWell Networks Spectrum SDC version 02.05.00

Description The issue allows remote viewer users to perform administrative functions, which could lead to unauthorized access and control.

Recommendations For SeaWell Networks Spectrum SDC version 02.05.00, update to a newer version that addresses this issue, if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2015-8284

Affected Products

Seawell Networks Spectrum Sdc

References · 4

• 🔥 http://packetstormsecurity.com/files/135311/SeaWell-Networks-Spectrum-SDC-02.05.00-Traversal-Privilege-Escalation.html · Exploit
• 🔥 https://exploit-db.com/exploits/39266 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-8284 · Security Note
• http://seclists.org/fulldisclosure/2016/Jan/58 · Note