Lucene search

IcscertCVE-2015-3964

HistorySep 11, 2015 - 4:59 p.m.

CVE-2015-3964

2015-09-1116:59:03

icscert

web.nvd.nist.gov

sma solar

webbox

cve-2015-3964

vulnerability

hardcoded passwords

security issue

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

Low

EPSS

0.006

Percentile

77.9%

JSON

SMA Solar Sunny WebBox has hardcoded passwords, which makes it easier for remote attackers to obtain access via unspecified vectors.

Affected configurations

Nvd

Node

sma_solar_technology_agwebbox_firmwareMatch-

VendorProductVersionCPE
sma_solar_technology_agwebbox_firmware-cpe:2.3:o:sma_solar_technology_ag:webbox_firmware:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sma_solar_technology_ag	webbox_firmware	-	cpe:2.3:o:sma_solar_technology_ag:webbox_firmware:-:::::::*

References

seclists.org/fulldisclosure/2015/Sep/51

ics-cert.us-cert.gov/advisories/ICSA-15-181-02

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

Low

EPSS

0.006

Percentile

77.9%

JSON

Related for CVE-2015-3964