Lucene search

[email protected]CVE-2016-10863

HistoryAug 08, 2019 - 9:15 p.m.

CVE-2016-10863

2019-08-0821:15:00

CWE-352

[email protected]

web.nvd.nist.gov

edimax

wi-fi extender

csrf

vulnerability

nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

44.6%

JSON

Edimax Wi-Fi Extender devices allow goform/formwlencryptvxd CSRF with resultant PSK key disclosure.

CPENameOperatorVersion
edimax:ew-7438rpn_mini_firmwareedimax ew-7438rpn mini firmwareeq-
edimax:7237rpd_firmwareedimax 7237rpd firmwareeq-

CPE	Name	Operator	Version
edimax:ew-7438rpn_mini_firmware	edimax ew-7438rpn mini firmware	eq	-
edimax:7237rpd_firmware	edimax 7237rpd firmware	eq	-

References

www.pentestpartners.com/security-blog/edimax-wi-fi-extender-can-disclose-your-wpa-key/

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

44.6%

JSON

Related for CVE-2016-10863

cvelist1 prion1