CVE Vulnerabilities

CVE-2018-17903

Authentication Bypass by Capture-replay

Published: Oct 24, 2018 | Modified: Sep 18, 2020
CVSS 3.x
9.1
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS 2.x
6.4 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery.

Weakness

A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).

Affected Software

Name Vendor Start Version End Version
Saga1-l8b_firmware Sagaradio * *

Potential Mitigations

References