Vulnerability CVE-2017-5136
Published: 2017-02-05

Description:
An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application failed to check the access control of the request which could result in an attacker being able to shutdown the system.

Type:

CWE-862

 (Missing Authorization)

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.8/10
6.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Complete
Affected software
Sendquick -> Avera sms gateway firmware 
Sendquick -> Entera sms gateway firmware 

 References:
http://www.securityfocus.com/bid/96031
https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances/
Copyright 2024, cxsecurity.com

 

Back to Top