CVE-2011-3997 Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected equipment, via unspecified vectors.
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected equipment, via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opengear console server firmware | <= 2.1.0u7 | No fix listed |
| opengear console server firmware | = 2.0.4 | No fix listed |
| opengear console server firmware | = 2.0.4u1 | No fix listed |
| opengear console server firmware | = 2.0.6 | No fix listed |
| opengear console server firmware | = 2.0.8 | No fix listed |
| opengear console server firmware | = 2.0.9 | No fix listed |
| opengear console server firmware | = 2.1.0 | No fix listed |
| opengear console server firmware | = 2.1.0u1 | No fix listed |
| Opengear acm5000 console server | All versions | No fix listed |
| Opengear cm4000 console server | All versions | No fix listed |
| Opengear im4004-5 console server | All versions | No fix listed |
| Opengear im4200 console server | All versions | No fix listed |
| Opengear img4000 console server | All versions | No fix listed |
| Opengear kcs6000 rackside console server | All versions | No fix listed |
References
- JVN#71349007 third-party-advisory
- JVNDB-2011-000096 third-party-advisory