Details of VAR-201407-0493

ID

VAR-201407-0493

CVE

CVE-2014-3889

TITLE

SX-2000WG vulnerable to denial-of-service (DoS)

Trust: 0.8

sources: JVNDB: JVNDB-2014-000065

DESCRIPTION

silex SX-2000WG devices with firmware before 1.5.4 allow remote attackers to cause a denial of service (connectivity outage) via crafted data in the Options field of a TCP header, a different vulnerability than CVE-2014-3890. SX-2000WG provided by silex technology, Inc. is a product that provides wireless connectivity for USB devices such as printers and hard disk drives (HDD). SX-2000WG contains an issue in the processing of TCP Option header, which may cause a denial-of-service (DoS). Note that this vulnerability is different from JVN#35998716. Network Security Class Students, Teaching Assistants, and Mentors of Security Camp 2013 reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.A remote attacker may cause the product to stop responding. Silex SX-2000WG is a USB print server from China's Silex. A denial of service vulnerability exists in Silex SX-2000WG. Sx-2000Wg Firmware is prone to a denial-of-service vulnerability

Trust: 2.52

sources: NVD: CVE-2014-3889 // JVNDB: JVNDB-2014-000065 // CNVD: CNVD-2014-04179 // BID: 77962 // VULHUB: VHN-71829

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2014-04179

AFFECTED PRODUCTS

vendor:	silex	model:	sx-2000wg	scope:	lte	version:	1.5.3	Trust: 1.0
vendor:	silex	model:	sx-2000wg	scope:	eq	version:	1.5.3	Trust: 0.9
vendor:	silex	model:	sx-2000wg	scope:	eq	version:	prior to 1.5.4	Trust: 0.8
vendor:	silex	model:	labs sx-2000wg	scope:	lte	version:	<=1.5.3	Trust: 0.6

sources: CNVD: CNVD-2014-04179 // BID: 77962 // JVNDB: JVNDB-2014-000065 // CNNVD: CNNVD-201407-079 // NVD: CVE-2014-3889

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2014-3889
value:	MEDIUM
Trust: 1.0
IPA:	JVNDB-2014-000065
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2014-04179
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201407-079
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-71829
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2014-3889
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
IPA:	JVNDB-2014-000065
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8
CNVD:	CNVD-2014-04179
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
VULHUB:	VHN-71829
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: CNVD: CNVD-2014-04179 // VULHUB: VHN-71829 // JVNDB: JVNDB-2014-000065 // CNNVD: CNNVD-201407-079 // NVD: CVE-2014-3889

PROBLEMTYPE DATA

problemtype:

CWE-20

Trust: 1.9

sources: VULHUB: VHN-71829 // JVNDB: JVNDB-2014-000065 // NVD: CVE-2014-3889

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201407-079

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201407-079

CONFIGURATIONS

sources: JVNDB: JVNDB-2014-000065

PATCH

title:	Firmware Download	url:	http://www.silex.jp/support/download/firm_sx2000wg.html	Trust: 0.8
title:	Patch for Silex SX-2000WG Denial of Service Vulnerability (CNVD-2014-04179)	url:	https://www.cnvd.org.cn/patchInfo/show/47239	Trust: 0.6

sources: CNVD: CNVD-2014-04179 // JVNDB: JVNDB-2014-000065

EXTERNAL IDS

db:	JVNDB	id:	JVNDB-2014-000065	Trust: 3.4
db:	NVD	id:	CVE-2014-3889	Trust: 3.4
db:	JVN	id:	JVN85571806	Trust: 3.4
db:	CNNVD	id:	CNNVD-201407-079	Trust: 0.7
db:	CNVD	id:	CNVD-2014-04179	Trust: 0.6
db:	BID	id:	77962	Trust: 0.4
db:	VULHUB	id:	VHN-71829	Trust: 0.1

sources: CNVD: CNVD-2014-04179 // VULHUB: VHN-71829 // BID: 77962 // JVNDB: JVNDB-2014-000065 // CNNVD: CNNVD-201407-079 // NVD: CVE-2014-3889

REFERENCES

url:	http://jvn.jp/en/jp/jvn85571806/index.html	Trust: 3.4
url:	http://jvndb.jvn.jp/jvndb/jvndb-2014-000065	Trust: 2.0
url:	//cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-3889	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-3889	Trust: 0.8
url:	http://jvndb.jvn.jp/en/contents/2014/jvndb-2014-000065.html	Trust: 0.6

sources: CNVD: CNVD-2014-04179 // VULHUB: VHN-71829 // BID: 77962 // JVNDB: JVNDB-2014-000065 // CNNVD: CNNVD-201407-079 // NVD: CVE-2014-3889

CREDITS

Unknown

Trust: 0.3

sources: BID: 77962

SOURCES

db:	CNVD	id:	CNVD-2014-04179
db:	VULHUB	id:	VHN-71829
db:	BID	id:	77962
db:	JVNDB	id:	JVNDB-2014-000065
db:	CNNVD	id:	CNNVD-201407-079
db:	NVD	id:	CVE-2014-3889

LAST UPDATE DATE

2025-04-12T23:29:39.699000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2014-04179	date:	2014-07-10T00:00:00
db:	VULHUB	id:	VHN-71829	date:	2014-07-11T00:00:00
db:	BID	id:	77962	date:	2014-07-02T00:00:00
db:	JVNDB	id:	JVNDB-2014-000065	date:	2014-07-07T00:00:00
db:	CNNVD	id:	CNNVD-201407-079	date:	2014-07-04T00:00:00
db:	NVD	id:	CVE-2014-3889	date:	2025-04-12T10:46:40.837

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2014-04179	date:	2014-07-10T00:00:00
db:	VULHUB	id:	VHN-71829	date:	2014-07-02T00:00:00
db:	BID	id:	77962	date:	2014-07-02T00:00:00
db:	JVNDB	id:	JVNDB-2014-000065	date:	2014-07-02T00:00:00
db:	CNNVD	id:	CNNVD-201407-079	date:	2014-07-04T00:00:00
db:	NVD	id:	CVE-2014-3889	date:	2014-07-02T14:55:06.017