Lucene search

K
jvnJapan Vulnerability NotesJVN:68922465
HistorySep 12, 2017 - 12:00 a.m.

JVN#68922465: Backdoor access issue in Wi-Fi STATION L-02F

2017-09-1200:00:00
Japan Vulnerability Notes
jvn.jp
37

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.004 Low

EPSS

Percentile

75.0%

Wi-Fi STATION L-02F provided by NTT DOCOMO, INC. contains a backdoor access issue.

Impact

An unauthenticated remote attacker may access the device with the administrative privilege and perform an unintended operation.

The reporter has conducted a test and confirmed that an attacker can log in to the device through internet by using an ID and a password, and execute arbitrary command.

Solution

Apply an Update
Apply the update according to the information provided by the provider.

Products Affected

  • Wi-Fi STATION L-02F Software version V10g and earlier

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.004 Low

EPSS

Percentile

75.0%

Related for JVN:68922465