CVE Vulnerabilities

CVE-2011-3997

Improper Authentication

Published: Nov 09, 2011 | Modified: Nov 16, 2011
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected equipment, via unspecified vectors.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Opengear_console_server_firmware Opengear * 2.1.0u7
Opengear_console_server_firmware Opengear 2.0.4 2.0.4
Opengear_console_server_firmware Opengear 2.0.4u1 2.0.4u1
Opengear_console_server_firmware Opengear 2.0.6 2.0.6
Opengear_console_server_firmware Opengear 2.0.8 2.0.8
Opengear_console_server_firmware Opengear 2.0.9 2.0.9
Opengear_console_server_firmware Opengear 2.1.0 2.1.0
Opengear_console_server_firmware Opengear 2.1.0u1 2.1.0u1

Potential Mitigations

References