CVE-2018-17923 - SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access to the product may able to reprogram it

Back Back to CVE browser

MEDIUM

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access to the product may able to reprogram it

Published Oct 24, 2018

6.9

MEDIUM

CVSS 3.0

EPSS 0.33%

Description

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access to the product may able to reprogram it.

Affected products

Vendor GAIN Electronic Co. Ltd Product Saga1-L8b Default
n/a
- Version
  All firmware versions prior to A0.10
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

GAIN Electronic Co. Ltd

Saga1-L8b

n/a

Version	Status	Constraints
All firmware versions prior to A0.10	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (2)

http://www.securityfocus.com/bid/105729
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-296-02
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/105729		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-296-02		x_refsource_MISCThird Party AdvisoryUS Government Resource