Lucene search
PRIOn knowledge basePRION:CVE-2017-11400HistoryNov 20, 2017 - 3:29 p.m.
Design/Logic Flaw
2017-11-2015:29:00
PRIOn knowledge base
www.prio-n.com
2
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete firmware signature allows a local attacker to upgrade the equipment (kernel, file system) with unsigned, attacker-controlled, data. This occurs because the appliance_config file is signed but the .tar.sec file is unsigned.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tofino_xenon_security_appliance_firmware | le | 3.1.0 |
Related
cvelist
cvelist
CVE-2017-11400
2017-11-20 15:00:00
CVE-2021-30066
2022-04-03 22:01:59
nvd
nvd
CVE-2017-11400
2017-11-20 15:29:00
CVE-2021-30066
2022-04-03 23:15:07
cve
cve
CVE-2017-11400
2017-11-20 15:29:00
CVE-2021-30066
2022-04-03 23:15:07
prion
prion
Code injection
2022-04-03 23:15:00