Lucene search

[email protected]CVE-2015-7911

HistoryDec 23, 2015 - 3:59 a.m.

CVE-2015-7911

2015-12-2303:59:03

CWE-255

[email protected]

web.nvd.nist.gov

cve-2015-7911

saia burgess

pcd1

pcd2

pcd3

pcd7

ftp

security vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.2%

JSON

Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices before 1.24.50 and PCD3.T665 and PCD3.T666 devices before 1.24.41 have hardcoded credentials, which allows remote attackers to obtain administrative access via an FTP session.

Affected configurations

NVD

Node

saia_burgess_controlspcd7.d4xxv_vga_mb_firmwareRange≤1.24.41

AND

saia_burgess_controlspcd7.d4xxv_vga_mbMatch-

Node

saia_burgess_controlspcd7.d4xxd_firmwareRange≤1.24.41

AND

saia_burgess_controlspcd7.d4xxdMatch-

Node

saia_burgess_controlspcd3.mxxx0_firmwareRange≤1.24.25

AND

saia_burgess_controlspcd3.mxxx0Match-

Node

saia_burgess_controlspcd7.d4xxd_svga_mb_firmwareRange≤1.24.41

AND

saia_burgess_controlspcd7.d4xxd_svga_mbMatch-

Node

saia_burgess_controlspcd3.t666_firmwareRange≤1.24.30

AND

saia_burgess_controlspcd3.t666Match-

Node

saia_burgess_controlspcd1.m2xx0_firmwareRange≤1.24.25

AND

saia_burgess_controlspcd1.m2xx0Match-

Node

saia_burgess_controlspcd3.mxx60_firmwareRange≤1.24.25

AND

saia_burgess_controlspcd3.mxx60Match-

Node

saia_burgess_controlspcd3.t665_firmwareRange≤1.24.30

AND

saia_burgess_controlspcd3.t665Range≤-

Node

saia_burgess_controlspcd2.m5xx0_firmwareRange≤1.24.25

AND

saia_burgess_controlspcd2.m5xx0Match-

Node

saia_burgess_controlspcd7.d4xxwtpf_wvga_mbMatch-

AND

saia_burgess_controlspcd7.d4xxwtpf_wvga_mb_firmwareMatch1.24.41

Node

saia_burgess_controlspcd7.d4xxwtpf_firmwareRange≤1.24.41

AND

saia_burgess_controlspcd7.d4xxwtpfMatch-

Node

saia_burgess_controlspcd1.m0xx0_firmwareRange≤1.24.25

AND

saia_burgess_controlspcd1.m0xx0Match-

Node

saia_burgess_controlspcd7.d4xxxt5f_firmwareRange≤1.24.41

AND

saia_burgess_controlspcd7.d4xxxt5fMatch-

Node

saia_burgess_controlspcd7.d4xxv_firmwareRange≤1.24.41

AND

saia_burgess_controlspcd7.d4xxvMatch-

CPENameOperatorVersion
saia_burgess_controls:pcd7.d4xxv_vga_mb_firmwaresaia burgess controls pcd7.d4xxv vga mb firmwarele1.24.41

CPE	Name	Operator	Version
saia_burgess_controls:pcd7.d4xxv_vga_mb_firmware	saia burgess controls pcd7.d4xxv vga mb firmware	le	1.24.41

References

ics-cert.us-cert.gov/advisories/ICSA-15-335-01

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.2%

JSON

Related for CVE-2015-7911

cvelist1 nessus2 prion1 nvd1 ics1