CVE Vulnerabilities

CVE-2018-17923

Improper Authentication

Published: Oct 24, 2018 | Modified: Oct 09, 2019
CVSS 3.x
6.9
MEDIUM
Source:
NVD
CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 2.x
6.9 MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access to the product may able to reprogram it.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Saga1-l8b_firmware Sagaradio * a0.10 (excluding)

Potential Mitigations

References