CVE-2017-5137 An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the SMS logs from an unauthenticated perspective.
MediumCVSS 6.2
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the SMS logs from an unauthenticated perspective.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sendquick entera sms gateway firmware | All versions | No fix listed |
| sendquick avera sms gateway firmware | All versions | No fix listed |
References
- 96031 third-party-advisory vdb-entry
- niantech.io third-party-advisory url-repurposed