A vulnerability was found in Siklu EtherHaul up to 7.3.x and classified as critical. This issue affects an unknown function. Upgrading to version 7.4.0 eliminates this vulnerability.
| Field | 03/31/2017 10:48 AM |
|---|---|
| cvss3 | H |
| cvss3 | H |
| date | 1490832000 (03/30/2017) |
| url | http://blog.iancaling.com/post/155127766533/ |
| price | $0-$5k |
| name | Upgrade |
| upgrade | 7.4.0 |
| cve | CVE-2017-7318 |
| cve | 1490745600 |
| cve | 1490832000 |
| cve | Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication. |
| osvdb | CVE-2017-7318 - Siklu - EtherHaul - Command Execution Issue |
| securityfocus | 97227 |
| securityfocus | 1490832000 (03/30/2017) |
| securityfocus | Configuration Error |
| securityfocus | Multiple Siklu EtherHaul Devices CVE-2017-7318 Remote Command Execution Vulnerability |
| location | Website |
| cvss2 | ND |
| cvss2 | OF |
| cvss2 | ND |
| cvss3 | X |
| cvss3 | O |
| cvss3 | X |
| 0day | 91 |
| cvss3 | 9.8 |
| vendor | Siklu |
| name | EtherHaul |
| version | <=7.3.x |
| discoverydate | 1482969600 |
| cwe | 200 (information disclosure) |
| risk | 2 |
| cvss2 | 6.8 |
| cvss2 | 5.9 |
| cvss2 | N |
| cvss2 | M |
| cvss2 | N |
| cvss2 | P |
| cvss2 | P |
| cvss2 | P |
| cvss2 | N |
| cvss2 | L |
| cvss2 | N |
| cvss2 | P |
| cvss2 | N |
| cvss2 | N |
| cvss3 | 8.5 |
| cvss3 | 8.2 |
| cvss3 | 7.3 |
| cvss3 | 7.0 |
| cvss3 | N |
| cvss3 | L |
| cvss3 | N |
| cvss3 | N |
| cvss3 | U |
| cvss3 | L |
| cvss3 | L |
| cvss3 | L |
| cvss3 | N |
| cvss3 | L |
| cvss3 | N |
| cvss3 | N |
| cvss3 | U |
| cvss3 | H |
Do you know our Splunk app?
Download it now for free!