PT-2021-9105 · 360F5 · 360F5

李立东 · Published 2021-01-11 · Updated 2021-07-21 · CVE-2019-3405

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions 360F5 versions 3.1.3.64296 and lower

Description The issue allows a third party to trigger the device to send a deauth frame by constructing and sending a specific illegal 802.11 Null Data Frame, causing other wireless terminals connected to disconnect from the wireless, leading to a Denial of Service (DoS) attack on the router's wireless connection.

Recommendations For versions 3.1.3.64296 and lower, update the firmware version to fix the vulnerability.

Fix

Related Identifiers

CVE-2019-3405

Affected Products

360F5

References · 4

• https://osv.dev/vulnerability/CVE-2019-3405 · Vendor Advisory
• https://security.360.cn/News/news/id/246 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-3405 · Security Note
• https://t.me/cvenotify/8774 · Telegram Post