CVE-2017-7318
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication.
Affected (1)
Products: Siklu: Etherhaul Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 7.3.0 |
| Running on/with | Platform Versions |
|---|---|
Siklu Etherhaul 5500fd | All versions |
Siklu Etherhaul 500tx | All versions |
Siklu Etherhaul 60ghz V Band Radio | All versions |
Siklu Etherhaul 70/80ghz Gigabit Radio | All versions |
Siklu Etherhaul 70/80ghz Multi Gigabit E Band Radio | All versions |
Siklu Etherhaul 70ghz E Band Radio | All versions |
References (4)
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Timeline
No history available yet.