Lucene search
HistoryAug 07, 2009 - 7:00 p.m.
CVE-2008-6916
siemens
speedstream 5200
authentication bypass
cve-2008-6916
netport software 1.1
remote attackers
invalid host header
hostname
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.047 Low
EPSS
Percentile
92.7%
Siemens SpeedStream 5200 with NetPort Software 1.1 allows remote attackers to bypass authentication via an invalid Host header, possibly involving a trailing dot in the hostname.
Affected configurations
Node
siemensspeedstream_5200Match-
john_doenetport_softwareMatch1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| siemens:speedstream_5200 | siemens speedstream 5200 | eq | - |
| john_doe:netport_software | john doe netport software | eq | 1.1 |
Related
prion
prion
Authentication flaw
2009-08-07 19:00:00
cvelist
cvelist
CVE-2008-6916
2009-08-07 18:33:00
nvd
nvd
CVE-2008-6916
2009-08-07 19:00:01
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.047 Low
EPSS
Percentile
92.7%
Related for CVE-2008-6916