CVE-2011-3997

Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected equipment, via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
opengearopengear_console_server_firmware
𝑥
≤ 2.1.0u7
opengearopengear_console_server_firmware
2.0.4
opengearopengear_console_server_firmware
2.0.4u1:u1
opengearopengear_console_server_firmware
2.0.6
opengearopengear_console_server_firmware
2.0.8
opengearopengear_console_server_firmware
2.0.9
opengearopengear_console_server_firmware
2.1.0
opengearopengear_console_server_firmware
2.1.0u1:u1
opengearacm5000_console_server
*
opengearcm4000_console_server
*
opengearim4004-5_console_server
*
opengearim4200_console_server
*
opengearimg4000_console_server
*
opengearkcs6000_rackside_console_server
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://jvn.jp/en/jp/JVN71349007/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000096
http://jvn.jp/en/jp/JVN71349007/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000096