Sign-up

ID

VAR-201310-0700


TITLE

ADB Discus DRG A125G 'wansinglecfg.cmd' Password Disclosure Vulnerability

Trust: 0.9

sources: CNVD: CNVD-2013-14198 // BID: 63393

DESCRIPTION

The ADB Discus DRG A125G 'wansinglecfg.cmd' script has a security vulnerability that allows a remote attacker to exploit a vulnerability to submit a request for password information. Discus DRG A125G is a wireless router product from Swiss ADB company. A password disclosure vulnerability exists in Discus DRG A125G. Attackers can use this vulnerability to obtain sensitive information that can help launch further attacks. Discus DRG A125G version has vulnerabilities, other versions may also be affected

Trust: 1.35

sources: CNVD: CNVD-2013-14198 // CNNVD: CNNVD-201310-686 // BID: 63393

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2013-14198

AFFECTED PRODUCTS

vendor:adbmodel:discus drg a125gscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2013-14198

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2013-14198
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2013-14198
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2013-14198

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201310-686

TYPE

information disclosure

Trust: 0.6

sources: CNNVD: CNNVD-201310-686

EXTERNAL IDS

db:BIDid:63393

Trust: 1.5

db:CNVDid:CNVD-2013-14198

Trust: 0.6

db:CNNVDid:CNNVD-201310-686

Trust: 0.6

sources: CNVD: CNVD-2013-14198 // BID: 63393 // CNNVD: CNNVD-201310-686

REFERENCES

url:http://www.securityfocus.com/bid/63393

Trust: 1.2

sources: CNVD: CNVD-2013-14198 // CNNVD: CNNVD-201310-686

CREDITS

Sebastin Magof

Trust: 0.6

sources: CNNVD: CNNVD-201310-686

SOURCES

db:CNVDid:CNVD-2013-14198
db:BIDid:63393
db:CNNVDid:CNNVD-201310-686

LAST UPDATE DATE

2022-05-17T01:43:24.099000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2013-14198date:2013-11-01T00:00:00
db:BIDid:63393date:2013-10-29T00:00:00
db:CNNVDid:CNNVD-201310-686date:2013-10-31T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2013-14198date:2013-11-01T00:00:00
db:BIDid:63393date:2013-10-29T00:00:00
db:CNNVDid:CNNVD-201310-686date:2013-10-31T00:00:00