| Title | 複数の ADB ブロードバンドゲートウェイおよびルータにおけるアクセス制御に関する脆弱性 |
|---|---|
| Summary | 複数の ADB ブロードバンドゲートウェイおよびルータには、アクセス制御に関する脆弱性が存在します。 |
| Possible impacts | 情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。 |
| Solution | ベンダ情報および参考情報を参照して適切な対策を実施してください。 |
| Publication Date | July 4, 2018, midnight |
| Registration Date | Sept. 21, 2018, 4:03 p.m. |
| Last Update | Sept. 21, 2018, 4:03 p.m. |
| CVSS3.0 : 重要 | |
| Score | 7.8 |
|---|---|
| Vector | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| CVSS2.0 : 危険 | |
| Score | 7.2 |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
| ADB |
| DV 2210 ファームウェア |
| P.RG AV4202N ファームウェア |
| VV 2220 ファームウェア |
| VV 5522 ファームウェア |
| No | Changed Details | Date of change |
|---|---|---|
| 1 | [2018年09月21日] 掲載 |
Sept. 21, 2018, 4:03 p.m. |
| Summary | All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerability where attackers are able to gain root access on the device, and extract further information such as sensitive configuration data of the ISP (e.g., VoIP credentials) or attack the internal network of the ISP. |
|---|---|
| Publication Date | July 6, 2018, 11:29 p.m. |
| Registration Date | March 1, 2021, 6:52 p.m. |
| Last Update | Nov. 21, 2024, 12:46 p.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:o:adbglobal:dv2210_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:adbglobal:dv2210:-:*:*:*:*:*:*:* | ||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:o:adbglobal:vv2220_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:adbglobal:vv2220:-:*:*:*:*:*:*:* | ||||
| Configuration3 | or higher | or less | more than | less than | |
| cpe:2.3:o:adbglobal:vv5522_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:adbglobal:vv5522:-:*:*:*:*:*:*:* | ||||
| Configuration4 | or higher | or less | more than | less than | |
| cpe:2.3:o:adbglobal:prg_av4202n_firmware:-:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:adbglobal:prg_av4202n:-:*:*:*:*:*:*:* | ||||