Lucene search

[email protected]CVE-2014-8362

HistoryJan 23, 2017 - 9:59 p.m.

CVE-2014-8362

2017-01-2321:59:00

CWE-284

[email protected]

web.nvd.nist.gov

cve-2014-8362

vivint sky control panel

security settings

web interface

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.4%

JSON

Vivint Sky Control Panel 1.1.1.9926 allows remote attackers to enable and disable the alarm system and modify other security settings via the Web-enabled interface.

Affected configurations

NVD

Node

vivintsky_control_panelMatch-

AND

vivintsky_control_panel_firmwareMatch1.1.1.9926

CPENameOperatorVersion
vivint:sky_control_panel_firmwarevivint sky control panel firmwareeq1.1.1.9926

CPE	Name	Operator	Version
vivint:sky_control_panel_firmware	vivint sky control panel firmware	eq	1.1.1.9926

References

packetstormsecurity.com/files/136040/Vivint-Sky-Control-Panel-Unauthenticated-Access.html

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.4%

JSON

Related for CVE-2014-8362

prion1 cvelist1 nvd1