Lucene search

MitreCVE-2018-6021

HistoryMay 09, 2018 - 9:29 p.m.

CVE-2018-6021

2018-05-0921:29:00

CWE-78

mitre

web.nvd.nist.gov

cve-2018-6021

silex sd-320an

ge mobilelink

remote code execution

nvd

system call parameter

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

45.2%

JSON

Silex SD-320AN version 2.01 and prior and GE MobileLink(GEH-SD-320AN) version GEH-1.1 and prior have a system call parameter that is not properly sanitized, which may allow remote code execution.

Affected configurations

Nvd

Node

silextechnologysd-320an_firmwareRange≤2.01

AND

silextechnologysd-320anMatch-

Node

silextechnologygeh-sd-320an_firmwareRange≤geh-1.1

AND

silextechnologygeh-sd-320anMatch-

VendorProductVersionCPE
silextechnologysd-320an_firmware*cpe:2.3:o:silextechnology:sd-320an_firmware:*:*:*:*:*:*:*:*
silextechnologysd-320an-cpe:2.3:h:silextechnology:sd-320an:-:*:*:*:*:*:*:*
silextechnologygeh-sd-320an_firmware*cpe:2.3:o:silextechnology:geh-sd-320an_firmware:*:*:*:*:*:*:*:*
silextechnologygeh-sd-320an-cpe:2.3:h:silextechnology:geh-sd-320an:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
silextechnology	sd-320an_firmware	*	cpe:2.3:o:silextechnology:sd-320an_firmware::::::::
silextechnology	sd-320an	-	cpe:2.3:h:silextechnology:sd-320an:-:::::::*
silextechnology	geh-sd-320an_firmware	*	cpe:2.3:o:silextechnology:geh-sd-320an_firmware::::::::
silextechnology	geh-sd-320an	-	cpe:2.3:h:silextechnology:geh-sd-320an:-:::::::*

References

ics-cert.us-cert.gov/advisories/ICSMA-18-128-01

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

45.2%

JSON

Related for CVE-2018-6021