Lucene search

MitreCVE-2018-13319

HistoryNov 26, 2018 - 11:29 p.m.

CVE-2018-13319

2018-11-2623:29:00

CWE-200

mitre

web.nvd.nist.gov

cve-2018-13319

incorrect access control

buffalo ts5600d1206

security vulnerability

unauthenticated post request

device information

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.005

Percentile

75.3%

JSON

Incorrect access control in get_portal_info in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to determine sensitive device information via an unauthenticated POST request.

Affected configurations

Nvd

Node

buffalots5600d1206_firmwareMatch3.61-0.10

AND

buffalots5600d1206Match-

VendorProductVersionCPE
buffalots5600d1206_firmware3.61-0.10cpe:2.3:o:buffalo:ts5600d1206_firmware:3.61-0.10:*:*:*:*:*:*:*
buffalots5600d1206-cpe:2.3:h:buffalo:ts5600d1206:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
buffalo	ts5600d1206_firmware	3.61-0.10	cpe:2.3:o:buffalo:ts5600d1206_firmware:3.61-0.10:::::::*
buffalo	ts5600d1206	-	cpe:2.3:h:buffalo:ts5600d1206:-:::::::*

References

blog.securityevaluators.com/buffalo-terastation-ts5600d1206-nas-cve-disclosure-ab5d159f036d

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

High

EPSS

0.005

Percentile

75.3%

JSON

Related for CVE-2018-13319