Refine your search

1 vulnerability found for Opengear console server firmware by Opengear

jvndb-2011-000096
Vulnerability from jvndb
Published
2011-11-04 17:34
Modified
2011-11-04 17:34
Severity ?
() - -
Summary
Opengear console servers vulnerable to authentication bypass
Details
Opengear console servers contains an authentication bypass vulnerability. Opengear console servers are for managing servers and network products. Opengear console servers contain an authentication bypass vulnerability. Tadayoshi Nakahira reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
Impacted products
Show details on JVN DB website


{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000096.html",
  "dc:date": "2011-11-04T17:34+09:00",
  "dcterms:issued": "2011-11-04T17:34+09:00",
  "dcterms:modified": "2011-11-04T17:34+09:00",
  "description": "Opengear console servers contains an authentication bypass vulnerability.\r\n\r\nOpengear console servers are for managing servers and network products. Opengear console servers contain an authentication bypass vulnerability.\r\n\r\nTadayoshi Nakahira reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000096.html",
  "sec:cpe": {
    "#text": "cpe:/a:opengear:opengear_console_server_firmware",
    "@product": "Opengear console server firmware",
    "@vendor": "Opengear",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "6.4",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2011-000096",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN71349007/index.html",
      "@id": "JVN#71349007",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3997",
      "@id": "CVE-2011-3997",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3997",
      "@id": "CVE-2011-3997",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-287",
      "@title": "Improper Authentication(CWE-287)"
    }
  ],
  "title": "Opengear console servers vulnerable to authentication bypass"
}