Authentication bypass in M2M ETHERNET FW - CVE-2018-17926
Published: December 19, 2018
Vulnerability identifier: #VU16609
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-17926
CWE-ID: CWE-287
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an adjacent attacker to bypass authentication on the target system.
The vulnerability exists due to improper authentication. An adjacent attacker can bypass the user authentication mechanism and upload a malicious language file.
Affected software
M2M ETHERNET FW
How to mitigate CVE-2018-17926
Install update from vendor's website.