CVE-2012-1808

2012-04-1317:55:01

CWE-287

[email protected]

web.nvd.nist.gov

cve-2012-1808

ecom ethernet module

koyo

web server

authentication

remote attackers

unspecified functions

6.9 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.005 Low

EPSS

Percentile

77.3%

JSON

The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 does not require authentication, which allows remote attackers to perform unspecified functions via unknown vectors.

Affected configurations

NVD

Node

koyoh0-ecom

koyoh0-ecom100

koyoh2-ecom

koyoh2-ecom-f

koyoh2-ecom100

koyoh4-ecom

koyoh4-ecom-f

koyoh4-ecom100

CPENameOperatorVersion
koyo:h0-ecomkoyo h0-ecomeq*
koyo:h0-ecom100koyo h0-ecom100eq*
koyo:h2-ecomkoyo h2-ecomeq*
koyo:h2-ecom-fkoyo h2-ecom-feq*
koyo:h2-ecom100koyo h2-ecom100eq*
koyo:h4-ecomkoyo h4-ecomeq*
koyo:h4-ecom-fkoyo h4-ecom-feq*
koyo:h4-ecom100koyo h4-ecom100eq*

CPE	Name	Operator	Version
koyo:h0-ecom	koyo h0-ecom	eq	*
koyo:h0-ecom100	koyo h0-ecom100	eq	*
koyo:h2-ecom	koyo h2-ecom	eq	*
koyo:h2-ecom-f	koyo h2-ecom-f	eq	*
koyo:h2-ecom100	koyo h2-ecom100	eq	*
koyo:h4-ecom	koyo h4-ecom	eq	*
koyo:h4-ecom-f	koyo h4-ecom-f	eq	*
koyo:h4-ecom100	koyo h4-ecom100	eq	*