Improper authentication in SAGA1-L - CVE-2018-17923
Published: October 24, 2018
Vulnerability identifier: #VU15510
CSH Severity: Low
CVSS v4: 5.4 [CVSS:4.0/AV:P/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-17923
CWE-ID: CWE-287
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a physical attacker to bypass authentication on the target system.
The vulnerability exists due to improper access control. An attacker with physical access to the product can reprogram it.
Affected software
SAGA1-L
How to mitigate CVE-2018-17923
Update to version A0.10.
SAGA1-L - update to