Lucene search

VulDBCVE-2017-20084

HistoryJun 22, 2022 - 6:15 a.m.

CVE-2017-20084

2022-06-2206:15:07

CWE-912

VulDB

web.nvd.nist.gov

jung smart visu server

cve-2017-20084

knx group address

backdoor

vulnerability

upgrade

nvd

security

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.8%

JSON

A vulnerability has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832 and classified as critical. Affected by this vulnerability is an unknown functionality of the component KNX Group Address. The manipulation leads to backdoor. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.900 is able to address this issue. It is recommended to upgrade the affected component.

Affected configurations

Nvd

Vulners

Node

jung-groupsmart_visu_server_firmwareMatch1.0.804

jung-groupsmart_visu_server_firmwareMatch1.0.830

jung-groupsmart_visu_server_firmwareMatch1.0.832

AND

jung-groupsmart_visu_serverMatch-

VendorProductVersionCPE
jung-groupsmart_visu_server_firmware1.0.804cpe:2.3:o:jung-group:smart_visu_server_firmware:1.0.804:*:*:*:*:*:*:*
jung-groupsmart_visu_server_firmware1.0.830cpe:2.3:o:jung-group:smart_visu_server_firmware:1.0.830:*:*:*:*:*:*:*
jung-groupsmart_visu_server_firmware1.0.832cpe:2.3:o:jung-group:smart_visu_server_firmware:1.0.832:*:*:*:*:*:*:*
jung-groupsmart_visu_server-cpe:2.3:h:jung-group:smart_visu_server:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
jung-group	smart_visu_server_firmware	1.0.804	cpe:2.3:o:jung-group:smart_visu_server_firmware:1.0.804:::::::*
jung-group	smart_visu_server_firmware	1.0.830	cpe:2.3:o:jung-group:smart_visu_server_firmware:1.0.830:::::::*
jung-group	smart_visu_server_firmware	1.0.832	cpe:2.3:o:jung-group:smart_visu_server_firmware:1.0.832:::::::*
jung-group	smart_visu_server	-	cpe:2.3:h:jung-group:smart_visu_server:-:::::::*

CNA Affected

[
  {
    "product": "Smart Visu Server",
    "vendor": "JUNG",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.804"
      },
      {
        "status": "affected",
        "version": "1.0.830"
      },
      {
        "status": "affected",
        "version": "1.0.832"
      }
    ]
  }
]

References

seclists.org/fulldisclosure/2017/Feb/18

vuldb.com/?id.96817

Social References

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.8%

JSON

Related for CVE-2017-20084