Lucene search

K
nvd[email protected]NVD:CVE-2021-43662
HistoryMar 31, 2022 - 12:15 a.m.

CVE-2021-43662

2022-03-3100:15:07
CWE-770
web.nvd.nist.gov
4
totolink ex300_v2
a720r
uncontrolled resource consumption
cve-2021-43662

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

19.9%

totolink EX300_v2, ver V4.0.3c.140_B20210429 and A720R ,ver V4.1.5cu.470_B20200911 have an issue which causes uncontrolled resource consumption.

Affected configurations

Nvd
Node
totolinkex300_v2_firmwareMatch4.0.3c.140_b20210429
AND
totolinkex300_v2Match-
Node
totolinka720r_firmwareMatch4.1.5cu.470_b20200911
AND
totolinka720rMatch-
VendorProductVersionCPE
totolinkex300_v2_firmware4.0.3c.140_b20210429cpe:2.3:o:totolink:ex300_v2_firmware:4.0.3c.140_b20210429:*:*:*:*:*:*:*
totolinkex300_v2-cpe:2.3:h:totolink:ex300_v2:-:*:*:*:*:*:*:*
totolinka720r_firmware4.1.5cu.470_b20200911cpe:2.3:o:totolink:a720r_firmware:4.1.5cu.470_b20200911:*:*:*:*:*:*:*
totolinka720r-cpe:2.3:h:totolink:a720r:-:*:*:*:*:*:*:*

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

19.9%

Related for NVD:CVE-2021-43662