Lucene search

JpcertCVE-2017-2280

HistoryAug 02, 2017 - 4:29 p.m.

CVE-2017-2280

2017-08-0216:29:00

CWE-798

jpcert

web.nvd.nist.gov

cve-2017-2280

firmware

hardcoded credentials

arbitrary code execution

nvd

CVSS2

8.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

38.6%

JSON

WN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the device.

Affected configurations

Nvd

Vulners

Node

iodatawn-ax1167gr_firmwareMatch3.00

AND

iodatawn-ax1167grMatch-

VendorProductVersionCPE
iodatawn-ax1167gr_firmware3.00cpe:2.3:o:iodata:wn-ax1167gr_firmware:3.00:*:*:*:*:*:*:*
iodatawn-ax1167gr-cpe:2.3:h:iodata:wn-ax1167gr:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
iodata	wn-ax1167gr_firmware	3.00	cpe:2.3:o:iodata:wn-ax1167gr_firmware:3.00:::::::*
iodata	wn-ax1167gr	-	cpe:2.3:h:iodata:wn-ax1167gr:-:::::::*

CNA Affected

[
  {
    "product": "WN-AX1167GR",
    "vendor": "I-O DATA DEVICE, INC.",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 3.00 and earlier"
      }
    ]
  }
]

References

www.iodata.jp/support/information/2017/wn-ax1167gr/

jvn.jp/en/jp/JVN01312667/index.html

CVSS2

8.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

38.6%

JSON

Related for CVE-2017-2280