CVE Vulnerabilities

CVE-2018-17923

Improper Authentication

Published: Oct 24, 2018 | Modified: Nov 21, 2024
CVSS 3.x
6.9
MEDIUM
Source:
NVD
CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 2.x
6.9 MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access to the product may able to reprogram it.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

NameVendorStart VersionEnd Version
Saga1-l8b_firmwareSagaradio*a0.10 (excluding)

Potential Mitigations

References