Lucene search

K
jvnJapan Vulnerability NotesJVN:96052093
HistoryJun 14, 2016 - 12:00 a.m.

JVN#96052093: ETX-R vulnerable to denial-of-service (DoS)

2016-06-1400:00:00
Japan Vulnerability Notes
jvn.jp
20

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.004

Percentile

73.5%

ETX-R provided by I-O DATA DEVICE, INC. is a wired LAN router. ETX-R contains a denial-of-service (DoS) vulnerability.

Impact

A remote unauthenticated attacker may cause the web server on the product to be terminated abnormally.

Solution

Apply a Workaround
The following workarounds may mitigate the affects of this vulnerability.

  • Enable the option “Disable WAN side ping reply”
    According to the developer, the option “Disable WAN side ping reply” is enabled by default.
    Note that these workarounds above do not prevent access from local networks.

Products Affected

  • ETX-R

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.004

Percentile

73.5%

Related for JVN:96052093