Vulnerability CVE-2017-17759
Published: 2017-12-19

Description:
Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service (by deleting the configuration) via a wc.dll?wwMaint~EditConfig request (which reaches an older version of a West Wind Web Connection HTTP service).

See advisories in our WLB2 database:
Topic
Author
Date
Low
Conarc iChannel Improper Access Restrictions
Information Para...
21.12.2017

Type:

CWE-noinfo

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Conarc -> Ichannel 

 References:
http://www.information-paradox.net/2017/12/conarc-ichannel-unauthenticated.html
https://www.exploit-db.com/exploits/43377/
Copyright 2024, cxsecurity.com

 

Back to Top