CVE-2013-3606

2014-01-2004:58:49

CWE-20

[email protected]

web.nvd.nist.gov

cve-2013-3606

nvd

dell powerconnect

goahead web server

denial of service

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.9%

JSON

The login page in the GoAhead web server on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of service (device outage) via a long username.

Affected configurations

NVD

Node

dellpowerconnect_3348Match1.2.1.3

dellpowerconnect_3524pMatch2.0.0.48

dellpowerconnect_5324Match2.0.1.4

CPENameOperatorVersion
dell:powerconnect_3348dell powerconnect 3348eq1.2.1.3
dell:powerconnect_3524pdell powerconnect 3524peq2.0.0.48
dell:powerconnect_5324dell powerconnect 5324eq2.0.1.4

CPE	Name	Operator	Version
dell:powerconnect_3348	dell powerconnect 3348	eq	1.2.1.3
dell:powerconnect_3524p	dell powerconnect 3524p	eq	2.0.0.48
dell:powerconnect_5324	dell powerconnect 5324	eq	2.0.1.4