Sign-up

ID

VAR-201508-0611


CVE

CVE-2015-2984


TITLE

Multiple I-O DATA LAN routers vulnerable in UPnP functionality

Trust: 0.8

sources: JVNDB: JVNDB-2015-000117

DESCRIPTION

I-O DATA DEVICE WN-G54/R2 routers with firmware before 1.03 and NP-BBRS routers allow remote attackers to cause a denial of service (SSDP reflection) via UPnP requests. A wired LAN router NP-BBRS and a wireless LAN router WN-G54/R2 provided by I-O DATA DEVICE, INC. contain a vulnerability in the UPnP functionality.The device may be used in a DDoS attack, as a SSDP reflector. An attacker could exploit the vulnerability to cause a denial of service

Trust: 2.52

sources: NVD: CVE-2015-2984 // JVNDB: JVNDB-2015-000117 // CNVD: CNVD-2015-05504 // BID: 76393 // VULHUB: VHN-80945

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2015-05504

AFFECTED PRODUCTS

vendor:iodatamodel:wn-g54\/r2scope:lteversion:1.02

Trust: 1.0

vendor:i o data devicemodel:np-bbrsscope:eqversion:with all firmware

Trust: 0.8

vendor:i o data devicemodel:wn-g54/r2scope:eqversion:with firmware prior to ver.1.03

Trust: 0.8

vendor:i omodel:data np-bbrsscope: - version: -

Trust: 0.6

vendor:i omodel:data wn-g54/r2scope:ltversion:1.03

Trust: 0.6

vendor:iodatamodel:wn-g54\/r2scope:eqversion:1.02

Trust: 0.6

sources: CNVD: CNVD-2015-05504 // JVNDB: JVNDB-2015-000117 // CNNVD: CNNVD-201508-447 // NVD: CVE-2015-2984

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2015-2984
value: MEDIUM

Trust: 1.0

IPA: JVNDB-2015-000117
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2015-05504
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201508-447
value: MEDIUM

Trust: 0.6

VULHUB: VHN-80945
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2015-2984
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

IPA: JVNDB-2015-000117
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

CNVD: CNVD-2015-05504
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-80945
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: CNVD: CNVD-2015-05504 // VULHUB: VHN-80945 // JVNDB: JVNDB-2015-000117 // CNNVD: CNNVD-201508-447 // NVD: CVE-2015-2984

PROBLEMTYPE DATA

problemtype:CWE-264

Trust: 1.9

sources: VULHUB: VHN-80945 // JVNDB: JVNDB-2015-000117 // NVD: CVE-2015-2984

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201508-447

TYPE

permissions and access control

Trust: 0.6

sources: CNNVD: CNNVD-201508-447

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2015-000117

PATCH
title:I-O DATA DEVICE, INC. website url:http://www.iodata.jp/support/information/2015/wn-g54r2/
Trust: 0.8
title:Patch for I-O DATA DEVICE NP-BBRS and WN-G54/R2 Remote Denial of Service Vulnerabilitiesurl:https://www.cnvd.org.cn/patchInfo/show/62765
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2015-05504 // 
            
            
            
            JVNDB: JVNDB-2015-000117

EXTERNAL IDS
db:NVDid:CVE-2015-2984
Trust: 3.4
db:JVNid:JVN17964918
Trust: 2.8
db:BIDid:76393
Trust: 2.6
db:JVNDBid:JVNDB-2015-000117
Trust: 2.5
db:CNNVDid:CNNVD-201508-447
Trust: 0.7
db:CNVDid:CNVD-2015-05504
Trust: 0.6
db:VULHUBid:VHN-80945
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2015-05504 // 
            
            
            
            VULHUB: VHN-80945 // 
            
            
            
            BID: 76393 // 
            
            
            
            JVNDB: JVNDB-2015-000117 // 
            
            
            
            CNNVD: CNNVD-201508-447 // 
            
            
            
            NVD: CVE-2015-2984

REFERENCES
url:http://jvn.jp/en/jp/jvn17964918/index.html
Trust: 2.8
url:http://www.securityfocus.com/bid/76393
Trust: 2.3
url:http://www.iodata.jp/support/information/2015/wn-g54r2/
Trust: 2.0
url:http://jvndb.jvn.jp/jvndb/jvndb-2015-000117
Trust: 1.7
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-2984
Trust: 0.8
url:https://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-2984
Trust: 0.8
url:http://www.iodata.jp/
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2015-05504 // 
            
            
            
            VULHUB: VHN-80945 // 
            
            
            
            BID: 76393 // 
            
            
            
            JVNDB: JVNDB-2015-000117 // 
            
            
            
            CNNVD: CNNVD-201508-447 // 
            
            
            
            NVD: CVE-2015-2984

CREDITS
JPCERT
Trust: 0.9
sources:
            
            
            BID: 76393 // 
            
            
            
            CNNVD: CNNVD-201508-447

SOURCES
db:CNVDid:CNVD-2015-05504
db:VULHUBid:VHN-80945
db:BIDid:76393
db:JVNDBid:JVNDB-2015-000117
db:CNNVDid:CNNVD-201508-447
db:NVDid:CVE-2015-2984

LAST UPDATE DATE
2025-04-13T23:41:20.153000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2015-05504date:2015-08-26T00:00:00
db:VULHUBid:VHN-80945date:2016-11-28T00:00:00
db:BIDid:76393date:2015-08-18T00:00:00
db:JVNDBid:JVNDB-2015-000117date:2015-08-28T00:00:00
db:CNNVDid:CNNVD-201508-447date:2015-08-27T00:00:00
db:NVDid:CVE-2015-2984date:2025-04-12T10:46:40.837

SOURCES RELEASE DATE
db:CNVDid:CNVD-2015-05504date:2015-08-24T00:00:00
db:VULHUBid:VHN-80945date:2015-08-22T00:00:00
db:BIDid:76393date:2015-08-18T00:00:00
db:JVNDBid:JVNDB-2015-000117date:2015-08-18T00:00:00
db:CNNVDid:CNNVD-201508-447date:2015-08-20T00:00:00
db:NVDid:CVE-2015-2984date:2015-08-22T18:59:00.123