Vulnerability Details : CVE-2017-10890

Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmware versions prior to 79.17.17.09, RX-CLV2-B firmware versions prior to 89.07.17.09, RX-CLV3-N firmware versions prior to 91.09.17.10 allows an attacker on the same LAN to perform arbitrary operations or access information via unspecified vectors.
Published 2017-11-17 14:29:00
Updated 2017-12-08 17:13:57
Source JPCERT/CC
View at NVD,   CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2017-10890

EPSS FAQ
0.05%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 21 %
Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-10890

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
4.3
 MEDIUM AV:A/AC:M/Au:N/C:P/I:P/A:N
5.5
4.9
 NIST
4.6
 MEDIUM CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
2.1
2.5
 NIST

CWE ids for CVE-2017-10890

  • Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.
    Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-10890

Products affected by CVE-2017-10890

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close