| |
Vulnerability CVE-2017-7937
Published: 2017-05-18 Modified: 2017-05-19
| Description: |
An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable. |
Type:
CWE-287 (Improper Authentication)
CVSS2 => (AV:N/AC:M/Au:N/C:N/I:P/A:N)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
4.3/10 |
2.9/10 |
8.6/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Medium |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
None |
Partial |
None |
References: |
https://ics-cert.us-cert.gov/advisories/ICSA-17-131-01
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
