PT-2020-18703 · Ignitenet · Ignitenet Helios Glinq

Published 2020-09-23 · Updated 2021-07-21 · CVE-2020-5782

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IgniteNet HeliOS GLinq version 2.2.1 r2961

Description The issue occurs when a user logs in and sets the wan type parameter, causing the wan interface to become unreachable. This results in a denial of service condition for devices that depend on this connection.

Recommendations For IgniteNet HeliOS GLinq version 2.2.1 r2961, avoid using the wan type parameter to prevent the denial of service condition. As a temporary workaround, consider restricting access to the login feature until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2020-5782

Affected Products

Ignitenet Helios Glinq

References · 3

• 🔥 https://tenable.com/security/research/tra-2020-55 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-5782 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5782 · Vendor Advisory