← Back

CVE-2017-18923

nvd nist
Published: Jul 29, 2020Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

beroNet VoIP Gateways before 3.0.16 have a PHP script that allows downloading arbitrary files, including ones with credentials.

Affected (1)

Beronet
1 product
Voice Over Internet Protocol Gateways Firmware
Configuration A
1 vulnerable · 15 platform
Vulnerable SoftwareAffected Versions
Voice Over Internet Protocol Gateways Firmware
From 2.0.0 to 3.0.16
Running on/withPlatform Versions
Beronet
Bf16001e1box
All versions
Beronet
Bf16001t1box
All versions
Beronet
Bf4001e1box
All versions
Beronet
Bf4001t1box
All versions
Beronet
Bf64002e1box
All versions
Beronet
Bf64002t1box
All versions
Beronet
Bfsb1s0
All versions
Beronet
Bfsb2hy
All versions
Beronet
Bfsb2s0
All versions
Beronet
Bfsb2s02xo
All versions
Beronet
Bfsb4xo
All versions
Beronet
Bfsb4xo4xs
All versions
Beronet
Bfsb4xs
All versions
Beronet
Bn16fxsfax B
All versions
Beronet
Bn16fxsfax C
All versions

Related CWEs

CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

References (4)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.