Search

Find a vulnerability

Search criteria

    1 vulnerability found for Opengear console server firmware by Opengear

    JVNDB-2011-000096

    Vulnerability from jvndb - Published: 2011-11-04 17:34 - Updated:2011-11-04 17:34
    Severity
    N/A (UNKNOWN) - -
    Summary
    Opengear console servers vulnerable to authentication bypass
    Details
    Opengear console servers contains an authentication bypass vulnerability. Opengear console servers are for managing servers and network products. Opengear console servers contain an authentication bypass vulnerability. Tadayoshi Nakahira reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
    Impacted products
    Show details on JVN DB website

    {
      "@rdf:about": "https://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000096.html",
      "dc:date": "2011-11-04T17:34+09:00",
      "dcterms:issued": "2011-11-04T17:34+09:00",
      "dcterms:modified": "2011-11-04T17:34+09:00",
      "description": "Opengear console servers contains an authentication bypass vulnerability.\r\n\r\nOpengear console servers are for managing servers and network products. Opengear console servers contain an authentication bypass vulnerability.\r\n\r\nTadayoshi Nakahira reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
      "link": "https://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000096.html",
      "sec:cpe": {
        "#text": "cpe:/a:opengear:opengear_console_server_firmware",
        "@product": "Opengear console server firmware",
        "@vendor": "Opengear",
        "@version": "2.2"
      },
      "sec:cvss": {
        "@score": "6.4",
        "@severity": "Medium",
        "@type": "Base",
        "@vector": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
        "@version": "2.0"
      },
      "sec:identifier": "JVNDB-2011-000096",
      "sec:references": [
        {
          "#text": "http://jvn.jp/en/jp/JVN71349007/index.html",
          "@id": "JVN#71349007",
          "@source": "JVN"
        },
        {
          "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3997",
          "@id": "CVE-2011-3997",
          "@source": "CVE"
        },
        {
          "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3997",
          "@id": "CVE-2011-3997",
          "@source": "NVD"
        },
        {
          "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
          "@id": "CWE-287",
          "@title": "Improper Authentication(CWE-287)"
        }
      ],
      "title": "Opengear console servers vulnerable to authentication bypass"
    }