Sign-up

ID

VAR-202101-1981


TITLE

Alcatel OAW series smart wireless AP devices have unauthorized access vulnerabilities

Trust: 0.6

sources: CNVD: CNVD-2020-73268

DESCRIPTION

Alcatel-Lucent (Alcatel-Lucent) is a multinational company that provides telecommunications hardware and software equipment and services, headquartered in Paris, France. Alcatel OAW series of smart wireless AP devices have unauthorized access vulnerabilities. Attackers can use the vulnerabilities to connect to the MQTT server anonymously and subscribe to arbitrary messages, causing information leakage.

Trust: 0.6

sources: CNVD: CNVD-2020-73268

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-73268

AFFECTED PRODUCTS

vendor:alcatel lucentmodel:oaw series of smart wireless ap equipmentscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2020-73268

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2020-73268
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2020-73268
severity: MEDIUM
baseScore: 6.4
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2020-73268

EXTERNAL IDS

db:CNVDid:CNVD-2020-73268

Trust: 0.6

sources: CNVD: CNVD-2020-73268

SOURCES

db:CNVDid:CNVD-2020-73268

LAST UPDATE DATE

2022-05-04T09:32:35.195000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-73268date:2020-12-22T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-73268date:2021-01-22T00:00:00