Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveDwfCVE-2019-1010136
HistoryJul 19, 2019 - 4:15 p.m.

CVE-2019-1010136

2019-07-1916:15:12
CWE-306
dwf
web.nvd.nist.gov
104
chinamobile
gpn2.4p21-c-cn
w2001en-00
unauthenticated remote reboot
access control
nvd
cve-2019-1010136

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.026

Percentile

90.4%

JSON

ChinaMobile GPN2.4P21-C-CN W2001EN-00 is affected by: Incorrect Access Control - Unauthenticated Remote Reboot. The impact is: PLC Wireless Router’s are vulnerable to an unauthenticated remote reboot due. The component is: Reboot settings are available to unauthenticated users instead of only authenticaed users. The attack vector is: Remote.

Affected configurations

Nvd
Node
chinamobileltdgpn2.4p21-c-cn_firmwareMatchw2001en-00
AND
chinamobileltdgpn2.4p21-c-cnMatch-
VendorProductVersionCPE
chinamobileltdgpn2.4p21-c-cn_firmwarew2001en-00cpe:2.3:o:chinamobileltd:gpn2.4p21-c-cn_firmware:w2001en-00:*:*:*:*:*:*:*
chinamobileltdgpn2.4p21-c-cn-cpe:2.3:h:chinamobileltd:gpn2.4p21-c-cn:-:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "GPN2.4P21-C-CN",
    "vendor": "ChinaMobile",
    "versions": [
      {
        "status": "affected",
        "version": "W2001EN-00"
      }
    ]
  }
]

Related

nvd 1
prion 1
cvelist 1
nvd
nvd
CVE-2019-1010136
2019-07-19 16:15:12
prion
prion
Design/Logic Flaw
2019-07-19 16:15:00
cvelist
cvelist
CVE-2019-1010136
2019-07-19 15:42:04

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.026

Percentile

90.4%

JSON
Related for CVE-2019-1010136
nvd1prion1cvelist1