Lucene search

K
cve[email protected]CVE-2017-7318
HistoryMar 30, 2017 - 7:59 a.m.

CVE-2017-7318

2017-03-3007:59:00
web.nvd.nist.gov
26
siklu etherhaul
7.4.0
rce vulnerability
remote command execution
nvd
cve-2017-7318

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.6%

Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication.

Affected configurations

NVD
Node
sikluetherhaul_firmwareRange7.3.0
AND
sikluetherhaul-5500fdMatch-
OR
sikluetherhaul_500txMatch-
OR
sikluetherhaul_60ghz_v-band_radioMatch-
OR
sikluetherhaul_70\/80ghz_gigabit_radioMatch-
OR
sikluetherhaul_70\/80ghz_multi-gigabit_e-band_radioMatch-
OR
sikluetherhaul_70ghz_e-band_radioMatch-

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.6%

Related for CVE-2017-7318