Access Control Vulnerability in SendQuick Entera and Avera Devices
CVE-2017-5136

7.5HIGH

Key Information:

Vendor

Sendquick

Status
Entera Sms Gateway Firmware
Vendor
CVE Published:
5 February 2017

What is CVE-2017-5136?

An access control vulnerability was identified in SendQuick Entera and Avera devices, pre-2HF16. The flaw arises from the application's inadequate handling of request access controls, enabling attackers to potentially shutdown devices unauthorized. This flaw poses a serious risk to network integrity and device availability.

References

https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-...
x_refsource_MISC
http://www.securityfocus.com/bid/96031
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.