5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
15.5%
A vulnerability was found in Keenetic KN-1010, KN-1410, KN-1711, KN-1810 and KN-1910 up to 4.1.2.15. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /version.js of the component Version Data Handler. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-261674 is the identifier assigned to this vulnerability. NOTE: The vendor is aware of this issue and plans to fix it by the end of 2024.
[
{
"vendor": "Keenetic",
"product": "KN-1010",
"versions": [
{
"version": "1.6.49",
"status": "affected"
},
{
"version": "3.5.68",
"status": "affected"
},
{
"version": "3.7.77",
"status": "affected"
},
{
"version": "4.0.2.215",
"status": "affected"
},
{
"version": "4.1.2.14",
"status": "affected"
},
{
"version": "4.1.2.15",
"status": "affected"
}
],
"modules": [
"Version Data Handler"
]
},
{
"vendor": "Keenetic",
"product": "KN-1410",
"versions": [
{
"version": "1.6.49",
"status": "affected"
},
{
"version": "3.5.68",
"status": "affected"
},
{
"version": "3.7.77",
"status": "affected"
},
{
"version": "4.0.2.215",
"status": "affected"
},
{
"version": "4.1.2.14",
"status": "affected"
},
{
"version": "4.1.2.15",
"status": "affected"
}
],
"modules": [
"Version Data Handler"
]
},
{
"vendor": "Keenetic",
"product": "KN-1711",
"versions": [
{
"version": "1.6.49",
"status": "affected"
},
{
"version": "3.5.68",
"status": "affected"
},
{
"version": "3.7.77",
"status": "affected"
},
{
"version": "4.0.2.215",
"status": "affected"
},
{
"version": "4.1.2.14",
"status": "affected"
},
{
"version": "4.1.2.15",
"status": "affected"
}
],
"modules": [
"Version Data Handler"
]
},
{
"vendor": "Keenetic",
"product": "KN-1810",
"versions": [
{
"version": "1.6.49",
"status": "affected"
},
{
"version": "3.5.68",
"status": "affected"
},
{
"version": "3.7.77",
"status": "affected"
},
{
"version": "4.0.2.215",
"status": "affected"
},
{
"version": "4.1.2.14",
"status": "affected"
},
{
"version": "4.1.2.15",
"status": "affected"
}
],
"modules": [
"Version Data Handler"
]
},
{
"vendor": "Keenetic",
"product": "KN-1910",
"versions": [
{
"version": "1.6.49",
"status": "affected"
},
{
"version": "3.5.68",
"status": "affected"
},
{
"version": "3.7.77",
"status": "affected"
},
{
"version": "4.0.2.215",
"status": "affected"
},
{
"version": "4.1.2.14",
"status": "affected"
},
{
"version": "4.1.2.15",
"status": "affected"
}
],
"modules": [
"Version Data Handler"
]
}
]
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
15.5%