CVE-2012-2606

2022-10-0316:15:36

CWE-287

[email protected]

web.nvd.nist.gov

cve-2012-2606

bradford network sentry

authentication bypass

udp port 4567

replay attack

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.7%

JSON

The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to UDP port 4567, as demonstrated by a replay attack.

Affected configurations

NVD

Node

bradfordnetworksnetwork_sentry_appliance_softwareRange≤5.3

AND

bradfordnetworksnetwork_sentry_applianceMatchns500rx

bradfordnetworksnetwork_sentry_applianceMatchns500x

CPENameOperatorVersion
bradfordnetworks:network_sentry_appliance_softwarebradfordnetworks network sentry appliance softwarele5.3
bradfordnetworks:network_sentry_appliancebradfordnetworks network sentry applianceeqns500rx
bradfordnetworks:network_sentry_appliancebradfordnetworks network sentry applianceeqns500x

CPE	Name	Operator	Version
bradfordnetworks:network_sentry_appliance_software	bradfordnetworks network sentry appliance software	le	5.3
bradfordnetworks:network_sentry_appliance	bradfordnetworks network sentry appliance	eq	ns500rx
bradfordnetworks:network_sentry_appliance	bradfordnetworks network sentry appliance	eq	ns500x