← Back

CVE-2011-3997

nvd nist
Published: Nov 9, 2011Modified: Apr 29, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected equipment, via unspecified vectors.

Affected (14)

Opengear
7 products
Opengear Console Server Firmware
Acm5000 Console Server
Cm4000 Console Server
Im4004 5 Console Server
Im4200 Console Server
Img4000 Console Server
Kcs6000 Rackside Console Server
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Opengear
Opengear Console Server Firmware
Up to 2.1.0u7
Opengear Console Server Firmware
Version 2.0.4
Opengear Console Server Firmware
Version 2.0.4u1
Opengear Console Server Firmware
Version 2.0.6
Opengear Console Server Firmware
Version 2.0.8
Opengear Console Server Firmware
Version 2.0.9
Opengear Console Server Firmware
Version 2.1.0
Opengear Console Server Firmware
Version 2.1.0u1
Acm5000 Console Server
All versions
Cm4000 Console Server
All versions
Im4004 5 Console Server
All versions
Im4200 Console Server
All versions
Img4000 Console Server
All versions
Kcs6000 Rackside Console Server
All versions

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (4)

Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.