VAR-201404-0501
Vulnerability from variot - Updated: 2023-12-18 13:19The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry password upon encountering the first incorrect character, which allows remote attackers to obtain passwords via a brute-force attack that relies on timing differences in responses to incorrect password guesses, aka a timing side-channel attack. SAProuter is an SAP program that protects your SAP network from unauthorized access behavior. There is an information disclosure vulnerability in SAProuter. Allows an attacker to recover the privilege password of the plaintext routing table by exploiting a timed attack. SAProuter is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. There is a security vulnerability in the 'passwordCheck' function of SAP Router 721 patch 117, 720 patch 411 and 710 patch 029
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201404-0501",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "router",
"scope": "eq",
"trust": 1.6,
"vendor": "sap",
"version": "721"
},
{
"model": "router",
"scope": "eq",
"trust": 1.6,
"vendor": "sap",
"version": "720"
},
{
"model": "router",
"scope": "eq",
"trust": 1.6,
"vendor": "sap",
"version": "710"
},
{
"model": "network interface router",
"scope": "lte",
"trust": 0.8,
"vendor": "sap",
"version": "(saprouter) 710 patch 029"
},
{
"model": "network interface router",
"scope": "eq",
"trust": 0.8,
"vendor": "sap",
"version": "(saprouter) 720 patch 411"
},
{
"model": "network interface router",
"scope": "eq",
"trust": 0.8,
"vendor": "sap",
"version": "(saprouter) 721 patch 117"
},
{
"model": "saprouter patch level",
"scope": "eq",
"trust": 0.6,
"vendor": "sap",
"version": "721117"
},
{
"model": "saprouter patch level",
"scope": "eq",
"trust": 0.6,
"vendor": "sap",
"version": "720411"
},
{
"model": "saprouter patch level",
"scope": "eq",
"trust": 0.6,
"vendor": "sap",
"version": "710029"
},
{
"model": "saprouter release patch le",
"scope": "eq",
"trust": 0.3,
"vendor": "sap",
"version": "721"
},
{
"model": "saprouter release patch le",
"scope": "eq",
"trust": 0.3,
"vendor": "sap",
"version": "720"
},
{
"model": "saprouter release patch le",
"scope": "eq",
"trust": 0.3,
"vendor": "sap",
"version": "710"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "router",
"version": "710"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "router",
"version": "720"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "router",
"version": "721"
}
],
"sources": [
{
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"db": "BID",
"id": "66938"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"db": "NVD",
"id": "CVE-2014-0984"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:sap:router:721:117:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:sap:router:720:411:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:sap:router:710:029:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2014-0984"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Martin Gallo from Core Security Consulting Services",
"sources": [
{
"db": "BID",
"id": "66938"
}
],
"trust": 0.3
},
"cve": "CVE-2014-0984",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 4.3,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "CVE-2014-0984",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.9,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2014-02529",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "VHN-68477",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2014-0984",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNVD",
"id": "CNVD-2014-02529",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201404-362",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-68477",
"trust": 0.1,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2014-0984",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"db": "VULHUB",
"id": "VHN-68477"
},
{
"db": "VULMON",
"id": "CVE-2014-0984"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"db": "NVD",
"id": "CVE-2014-0984"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry password upon encountering the first incorrect character, which allows remote attackers to obtain passwords via a brute-force attack that relies on timing differences in responses to incorrect password guesses, aka a timing side-channel attack. SAProuter is an SAP program that protects your SAP network from unauthorized access behavior. There is an information disclosure vulnerability in SAProuter. Allows an attacker to recover the privilege password of the plaintext routing table by exploiting a timed attack. SAProuter is prone to an information-disclosure vulnerability. \nAttackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. There is a security vulnerability in the \u0027passwordCheck\u0027 function of SAP Router 721 patch 117, 720 patch 411 and 710 patch 029",
"sources": [
{
"db": "NVD",
"id": "CVE-2014-0984"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"db": "BID",
"id": "66938"
},
{
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"db": "VULHUB",
"id": "VHN-68477"
},
{
"db": "VULMON",
"id": "CVE-2014-0984"
}
],
"trust": 2.79
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-68477",
"trust": 0.1,
"type": "unknown"
},
{
"reference": "https://vulmon.com/exploitdetails?qidtp=exploitdb\u0026qid=32919",
"trust": 0.1,
"type": "exploit"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-68477"
},
{
"db": "VULMON",
"id": "CVE-2014-0984"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2014-0984",
"trust": 3.7
},
{
"db": "SECUNIA",
"id": "57993",
"trust": 1.2
},
{
"db": "EXPLOIT-DB",
"id": "32919",
"trust": 1.2
},
{
"db": "BID",
"id": "66938",
"trust": 1.0
},
{
"db": "CNNVD",
"id": "CNNVD-201404-362",
"trust": 0.9
},
{
"db": "CNVD",
"id": "CNVD-2014-02529",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173",
"trust": 0.8
},
{
"db": "OSVDB",
"id": "105967",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20140416 [CORE-2014-0003] - SAP ROUTER PASSWORD TIMING ATTACK",
"trust": 0.6
},
{
"db": "IVD",
"id": "7593D75A-1EDC-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "SEEBUG",
"id": "SSVID-86180",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "126194",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-68477",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2014-0984",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"db": "VULHUB",
"id": "VHN-68477"
},
{
"db": "VULMON",
"id": "CVE-2014-0984"
},
{
"db": "BID",
"id": "66938"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"db": "NVD",
"id": "CVE-2014-0984"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
]
},
"id": "VAR-201404-0501",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"db": "VULHUB",
"id": "VHN-68477"
}
],
"trust": 1.9
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02529"
}
]
},
"last_update_date": "2023-12-18T13:19:59.114000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "SAP Security Note 1986895",
"trust": 0.8,
"url": "http://scn.sap.com/docs/doc-8218"
},
{
"title": "Patch for SAProuter Information Disclosure Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/45053"
},
{
"title": "martingalloar",
"trust": 0.1,
"url": "https://github.com/martingalloar/martingalloar "
},
{
"title": "publications",
"trust": 0.1,
"url": "https://github.com/martingalloar/publications "
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"db": "VULMON",
"id": "CVE-2014-0984"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-264",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-68477"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"db": "NVD",
"id": "CVE-2014-0984"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.6,
"url": "http://www.coresecurity.com/advisories/sap-router-password-timing-attack"
},
{
"trust": 1.8,
"url": "http://scn.sap.com/docs/doc-8218"
},
{
"trust": 1.8,
"url": "https://service.sap.com/sap/support/notes/1986895"
},
{
"trust": 1.2,
"url": "http://www.securityfocus.com/archive/1/531854/100/0/threaded"
},
{
"trust": 1.2,
"url": "http://www.exploit-db.com/exploits/32919"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-0984"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-0984"
},
{
"trust": 0.6,
"url": "http://secunia.com/advisories/57993/"
},
{
"trust": 0.6,
"url": "http://osvdb.com/show/osvdb/105967"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/531854/100/0/threaded"
},
{
"trust": 0.6,
"url": "http://secunia.com/advisories/57993"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/264.html"
},
{
"trust": 0.1,
"url": "http://tools.cisco.com/security/center/viewalert.x?alertid=33846"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://www.exploit-db.com/exploits/32919/"
},
{
"trust": 0.1,
"url": "https://github.com/martingalloar/martingalloar"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"db": "VULHUB",
"id": "VHN-68477"
},
{
"db": "VULMON",
"id": "CVE-2014-0984"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"db": "NVD",
"id": "CVE-2014-0984"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"db": "VULHUB",
"id": "VHN-68477"
},
{
"db": "VULMON",
"id": "CVE-2014-0984"
},
{
"db": "BID",
"id": "66938"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"db": "NVD",
"id": "CVE-2014-0984"
},
{
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-04-21T00:00:00",
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"date": "2014-04-21T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"date": "2014-04-17T00:00:00",
"db": "VULHUB",
"id": "VHN-68477"
},
{
"date": "2014-04-17T00:00:00",
"db": "VULMON",
"id": "CVE-2014-0984"
},
{
"date": "2014-04-16T00:00:00",
"db": "BID",
"id": "66938"
},
{
"date": "2014-04-22T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"date": "2014-04-17T14:55:08.857000",
"db": "NVD",
"id": "CVE-2014-0984"
},
{
"date": "2014-04-22T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-04-21T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-02529"
},
{
"date": "2018-10-10T00:00:00",
"db": "VULHUB",
"id": "VHN-68477"
},
{
"date": "2018-10-10T00:00:00",
"db": "VULMON",
"id": "CVE-2014-0984"
},
{
"date": "2014-04-16T00:00:00",
"db": "BID",
"id": "66938"
},
{
"date": "2014-04-22T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-002173"
},
{
"date": "2018-10-10T21:29:00.337000",
"db": "NVD",
"id": "CVE-2014-0984"
},
{
"date": "2014-04-22T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "SAProuter Information Disclosure Vulnerability",
"sources": [
{
"db": "IVD",
"id": "7593d75a-1edc-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-02529"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "permissions and access control",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201404-362"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…