ID
VAR-201707-1359
TITLE
UTstarcom WA3002G4 Unauthenticated DNS Change Vulnerability
Trust: 0.6
sources:
CNVD: CNVD-2017-16355
DESCRIPTION
UTStarcom provides suppliers of broadband DSLAM and DSDSLMS hardware for managing DSL through PPPoE, PPPoA and other modes. The BAS1000 provides service management for broadband and narrowband from a single platform. There is a security hole in UTstarcomWA3002G4. An attacker could exploit the vulnerability to access the sites and devices of a vulnerable system and redirect to a malicious site.
Trust: 0.6
sources:
CNVD: CNVD-2017-16355
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2017-16355
AFFECTED PRODUCTS
| vendor: | utstarcom | model: | wa3002g4 | scope: | - | version: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2017-16355
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
sources:
CNVD: CNVD-2017-16355
EXTERNAL IDS
| db: | EXPLOIT-DB | id: | 42194 | Trust: 0.6 |
| db: | EXPLOITDB | id: | 42194 | Trust: 0.6 |
| db: | CNVD | id: | CNVD-2017-16355 | Trust: 0.6 |
sources:
CNVD: CNVD-2017-16355
REFERENCES
| url: | https://www.exploit-db.com/exploits/42194/ | Trust: 0.6 |
sources:
CNVD: CNVD-2017-16355
SOURCES
| db: | CNVD | id: | CNVD-2017-16355 |
LAST UPDATE DATE
2022-05-17T02:08:03.989000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2017-16355 | date: | 2017-07-25T00:00:00 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2017-16355 | date: | 2017-07-25T00:00:00 |