CVE-2014-0343 : The web interface on Virtual Access GW6110A routers with software 9.00 before 9.09.27, 9.50 before 9.50.21, and 10.00 be

The web interface on Virtual Access GW6110A routers with software 9.00 before 9.09.27, 9.50 before 9.50.21, and 10.00 before 10.00.21 allows remote authenticated users to gain privileges via a modified JavaScript variable.

Published 2014-03-25 20:55:07

Updated 2014-03-26 15:48:19

Source CERT/CC

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2014-0343

EPSS FAQ

0.15%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 50 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2014-0343

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.9	MEDIUM	AV:A/AC:M/Au:S/C:P/I:P/A:P	4.4	6.4	NIST
Access Vector: Adjacent Network Access Complexity: Medium Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

Products affected by CVE-2014-0343

Virtualaccess » Gw6110a Firmware » Version: 10.00
cpe:2.3:o:virtualaccess:gw6110a_firmware:10.00:*:*:*:*:*:*:*
Matching versions
Virtualaccess » Gw6110a Firmware » Version: 9.00
cpe:2.3:o:virtualaccess:gw6110a_firmware:9.00:*:*:*:*:*:*:*
Matching versions
Virtualaccess » Gw6110a Firmware » Version: 9.50
cpe:2.3:o:virtualaccess:gw6110a_firmware:9.50:*:*:*:*:*:*:*
Matching versions
Virtualaccess » Gw6110a » Version: N/A
cpe:2.3:h:virtualaccess:gw6110a:-:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2014-0343

Exploit prediction scoring system (EPSS) score for CVE-2014-0343

CVSS scores for CVE-2014-0343

References for CVE-2014-0343

Products affected by CVE-2014-0343