Netgear SRX5308 直到4.3.5-3 拒绝服务

分类为棘手的漏洞曾在Netgear SRX5308 直到4.3.5-3中发现。 受影响的是未知功能。 手动调试的不合法输入可导致 拒绝服务。 使用CWE来声明会导致 CWE-404 的问题。 此漏洞的脆弱性 2023-04-28所提交。 索取公告的网址是github.com。 该漏洞的交易名称为CVE-2023-2380， 攻击可能起始于远程， 无技术细节可用。 此外还有一个漏洞可利用。 该漏洞利用已公开，可能会被利用。 目前漏洞的结构决定了可能的价格范围为美元价USD $0-$5k。 该漏洞由MITRE ATT&CK项目分配为T1499。 它被宣布为proof-of-concept。 该漏洞利用的共享下载地址为：github.com。 估计零日攻击的地下价格约为$5k-$25k。 该漏洞被披露后，此前未曾发表过可能的缓解措施。

字段2023-04-28 18時59分2023-05-21 16時29分2023-05-21 16時36分
vendorNetgearNetgearNetgear
nameSRX5308SRX5308SRX5308
version<=4.3.5-3<=4.3.5-3<=4.3.5-3
platform
cwe404 (拒绝服务)404 (拒绝服务)404 (拒绝服务)
risk111
cvss3_vuldb_avNNN
cvss3_vuldb_acLLL
cvss3_vuldb_uiNNN
cvss3_vuldb_sUUU
cvss3_vuldb_cNNN
cvss3_vuldb_iNNN
cvss3_vuldb_aHHH
cvss3_vuldb_ePPP
cvss3_vuldb_rcRRR
urlhttps://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/17https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/17https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/17
availability111
publicity111
urlhttps://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/17https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/17https://github.com/leetsun/IoT/tree/main/Netgear-SRX5308/17
cveCVE-2023-2380CVE-2023-2380CVE-2023-2380
responsibleVulDBVulDBVulDB
response_summaryThe vendor was contacted early about this disclosure but did not respond in any way.The vendor was contacted early about this disclosure but did not respond in any way.The vendor was contacted early about this disclosure but did not respond in any way.
date1682632800 (2023-04-28)1682632800 (2023-04-28)1682632800 (2023-04-28)
cvss2_vuldb_avNNN
cvss2_vuldb_acLLL
cvss2_vuldb_ciNNN
cvss2_vuldb_iiNNN
cvss2_vuldb_aiCCC
cvss2_vuldb_ePOCPOCPOC
cvss2_vuldb_rcURURUR
cvss2_vuldb_auSSS
cvss2_vuldb_rlNDNDND
cvss3_vuldb_prLLL
cvss3_vuldb_rlXXX
cvss2_vuldb_basescore6.86.86.8
cvss2_vuldb_tempscore5.85.85.8
cvss3_vuldb_basescore6.56.56.5
cvss3_vuldb_tempscore5.95.95.9
cvss3_meta_basescore6.56.56.5
cvss3_meta_tempscore5.95.96.3
price_0day$5k-$25k$5k-$25k$5k-$25k
cve_assigned1682632800 (2023-04-28)1682632800 (2023-04-28)
cve_nvd_summaryA vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown function. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-227658 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown function. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-227658 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
cvss3_nvd_avN
cvss3_nvd_acL
cvss3_nvd_prL
cvss3_nvd_uiN
cvss3_nvd_sU
cvss3_nvd_cN
cvss3_nvd_iN
cvss3_nvd_aH
cvss2_nvd_avN
cvss2_nvd_acL
cvss2_nvd_auS
cvss2_nvd_ciN
cvss2_nvd_iiN
cvss2_nvd_aiC
cvss3_cna_avN
cvss3_cna_acL
cvss3_cna_prL
cvss3_cna_uiN
cvss3_cna_sU
cvss3_cna_cN
cvss3_cna_iN
cvss3_cna_aH
cve_cnaVulDB
cvss2_nvd_basescore6.8
cvss3_nvd_basescore6.5
cvss3_cna_basescore6.5

◂ 上一步一览下一步 ▸

Do you know our Splunk app?

Download it now for free!