Lucene search

CertccCVE-2015-5618

HistoryAug 01, 2015 - 1:59 a.m.

CVE-2015-5618

2015-08-0101:59:19

CWE-264

certcc

web.nvd.nist.gov

chiyu

bf-630w

fingerprint access control

authentication bypass

voice time set

unifinger

config settings

cve-2015-5618

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.005

Percentile

77.4%

JSON

Chiyu BF-630 and BF-630W fingerprint access-control devices allow remote attackers to bypass authentication and (1) read or (2) modify (a) Voice Time Set configuration settings via a request to voice.htm or (b) UniFinger configuration settings via a request to bf.htm, a different vulnerability than CVE-2015-2871.

Affected configurations

Nvd

Node

chiyutwbf-630

chiyutwbf-630w

VendorProductVersionCPE
chiyutwbf-630*cpe:2.3:h:chiyutw:bf-630:*:*:*:*:*:*:*:*
chiyutwbf-630w*cpe:2.3:h:chiyutw:bf-630w:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
chiyutw	bf-630	*	cpe:2.3:h:chiyutw:bf-630::::::::
chiyutw	bf-630w	*	cpe:2.3:h:chiyutw:bf-630w::::::::

References

www.kb.cert.org/vuls/id/360431

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.005

Percentile

77.4%

JSON

Related for CVE-2015-5618