CVE-2017-3470 in Communications Security Gateway

Resumen (Inglés)

Vulnerability in the Oracle Communications Security Gateway component of Oracle Communications Applications (subcomponent: Network). The supported version that is affected is 3.0.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via ICMP Ping to compromise Oracle Communications Security Gateway. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Security Gateway. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2016-12-06

Divulgación

2017-04-24

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
100040	Oracle Communications Security Gateway Network escalada de privilegios	284	No está definido	Arreglo oficial	CVE-2017-3470

Fuentes

• MITRE
• NVD
• CVE Details