Authentication bypass in OnCell - CVE-2017-7915
Published: May 24, 2017 / Updated: May 24, 2017
Vulnerability identifier: #VU6677
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-7915
CWE-ID: CWE-307
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a brute-force attack.
The vulnerability exists due to improper restriction of excessive authentication attempts. A remote attacker can perform brute-force attack to determine parameters for authentication bypass.
Successful exploitation of the vulnerability may allow an attacker to gain unauthorized access to vulnerable system.
Affected software
OnCell
How to mitigate CVE-2017-7915
Install update from vendor's website.