CVE-2017-7576

DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials (such as the username of energetic and password of wireless) meant to allow the vendor to access the devices. These credentials can be used in the web interface or by connecting to the device via TELNET. This is fixed in recent versions including 1.4.8.

CVSS v3 9.8 CRITICAL
CVSS v2.0 7.5 HIGH

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://blog.iancaling.com/post/159276197313/	Third Party Advisory
http://blog.iancaling.com/post/159276197313/	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:dragonwavex:horizon_wireless_radio_firmware:1.01.03:*:*:*:*:*:*:*

cpe:2.3:h:dragonwavex:horizon_wireless_radio:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:32

Type	Values Removed	Values Added
References	~~() http://blog.iancaling.com/post/159276197313/ - Third Party Advisory~~	() http://blog.iancaling.com/post/159276197313/ - Third Party Advisory

Information

Published : 2017-04-06 22:59

Updated : 2024-11-21 03:32

NVD link : CVE-2017-7576

Mitre link : CVE-2017-7576

CVE.ORG link : CVE-2017-7576

JSON object : View

Products Affected

dragonwavex

horizon_wireless_radio_firmware
horizon_wireless_radio

CWE

CWE-798

Use of Hard-coded Credentials

{"id": "CVE-2017-7576", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2017-04-06T22:59:00.170", "references": [{"url": "http://blog.iancaling.com/post/159276197313/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://blog.iancaling.com/post/159276197313/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials (such as the username of energetic and password of wireless) meant to allow the vendor to access the devices. These credentials can be used in the web interface or by connecting to the device via TELNET. This is fixed in recent versions including 1.4.8."}, {"lang": "es", "value": "Las radios inal\u00e1mbricas de DragonWave Horizon 1.01.03 tienen credenciales de inicio de sesi\u00f3n (como el nombre de usuario de en\u00e9rgico y la contrase\u00f1a de conexi\u00f3n inal\u00e1mbrica) con el fin de permitir que el proveedor acceda a los dispositivos. Estas credenciales se pueden utilizar en la interfaz web o mediante la conexi\u00f3n al dispositivo a trav\u00e9s de TELNET. Esto se arregla en versiones recientes incluyendo 1.4.8."}], "lastModified": "2024-11-21T03:32:12.017", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dragonwavex:horizon_wireless_radio_firmware:1.01.03:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "197DA04A-FA5E-4156-A43F-7ABAE9130283"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dragonwavex:horizon_wireless_radio:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "909D714B-9084-47B1-88D6-5D19B6B32212"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}