CVE-2017-7318 : Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command executio

Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication.

Published 2017-03-30 07:59:00

Updated 2019-10-03 00:03:26

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2017-7318

Siklu » Etherhaul Firmware
Versions up to, including, (<=) 7.3.0
cpe:2.3:o:siklu:etherhaul_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siklu » Etherhaul-5500fd » Version: N/A
When used together with: Siklu » Etherhaul 500tx » Version: N/A
When used together with: Siklu » Etherhaul 60ghz V-band Radio » Version: N/A
When used together with: Siklu » Etherhaul 70/80ghz Gigabit Radio » Version: N/A
When used together with: Siklu » Etherhaul 70/80ghz Multi-gigabit E-band Radio » Version: N/A
When used together with: Siklu » Etherhaul 70ghz E-band Radio » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2017-7318

EPSS FAQ

2.26%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 88 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-7318

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2017-7318

http://blog.iancaling.com/post/155127766533/

404 — Page not found
Exploit;Third Party Advisory
http://www.securityfocus.com/bid/97227

Multiple Siklu EtherHaul Devices CVE-2017-7318 Remote Command Execution Vulnerability
Third Party Advisory;VDB Entry

Jump to

Vulnerability Details : CVE-2017-7318

Products affected by CVE-2017-7318

Exploit prediction scoring system (EPSS) score for CVE-2017-7318

CVSS scores for CVE-2017-7318

References for CVE-2017-7318