PT-2020-8629 · Juuko · Juuko K-800

Akira Urano + 6 · Published 2020-11-02 · Updated 2020-11-12 · CVE-2018-17932

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: JUUKO K-800 versions prior to numbers ending ...9A

Description: The issue allows attackers to perform a replay attack and command forgery, potentially enabling them to replay commands, control the device, view commands, or cause the device to stop running.

Recommendations: For JUUKO K-800 versions prior to numbers ending ...9A, update the firmware to a version with numbers ending ...9A or later to resolve the issue.

Fix

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2018-17932

Affected Products

Juuko K-800

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2018-17932 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsa-20-301-01 · Note