Details of VAR-201310-0652

ID

VAR-201310-0652

TITLE

ARRIS DG860A 'router.data' NVRAM Backup File Remote Information Disclosure Vulnerability

Trust: 0.9

sources: CNVD: CNVD-2013-14016 // BID: 63211

DESCRIPTION

ARRIS DG860A does not properly handle backup files, allowing unauthenticated attackers to exploit the vulnerability to access backup files for password information. Arris DG860A is a modem product of the American Arris Group. An information disclosure vulnerability exists in ARRIS DG860A. Attackers can use this vulnerability to obtain sensitive information that can help launch further attacks. This may result in further attacks

Trust: 1.35

sources: CNVD: CNVD-2013-14016 // CNNVD: CNNVD-201310-487 // BID: 63211

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2013-14016

AFFECTED PRODUCTS

vendor:

arris

model:

dg860a

scope:

version:

Trust: 0.6

sources: CNVD: CNVD-2013-14016

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2013-14016
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2013-14016
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2013-14016

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201310-487

TYPE

information disclosure

Trust: 0.6

sources: CNNVD: CNNVD-201310-487

EXTERNAL IDS

db:	BID	id:	63211	Trust: 1.5
db:	PACKETSTORM	id:	123667	Trust: 0.6
db:	CNVD	id:	CNVD-2013-14016	Trust: 0.6
db:	CNNVD	id:	CNNVD-201310-487	Trust: 0.6

sources: CNVD: CNVD-2013-14016 // BID: 63211 // CNNVD: CNNVD-201310-487

REFERENCES

url:	http://packetstormsecurity.com/files/123667/arris-dg860a-nvram-backup-compressor-decompressor.html	Trust: 0.6
url:	http://www.securityfocus.com/bid/63211	Trust: 0.6

sources: CNVD: CNVD-2013-14016 // CNNVD: CNNVD-201310-487

CREDITS

Justin Oberdorf

Trust: 0.9

sources: BID: 63211 // CNNVD: CNNVD-201310-487

SOURCES

db:	CNVD	id:	CNVD-2013-14016
db:	BID	id:	63211
db:	CNNVD	id:	CNNVD-201310-487

LAST UPDATE DATE

2022-05-17T02:09:53.812000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2013-14016	date:	2013-10-24T00:00:00
db:	BID	id:	63211	date:	2013-10-18T00:00:00
db:	CNNVD	id:	CNNVD-201310-487	date:	2013-10-23T00:00:00

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2013-14016	date:	2013-10-24T00:00:00
db:	BID	id:	63211	date:	2013-10-18T00:00:00
db:	CNNVD	id:	CNNVD-201310-487	date:	2013-10-23T00:00:00