CVE-2011-3997

Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected equipment, via unspecified vectors.

Score

CVSS 2.0 7.5 High

Status

Modified - vultures@jpcert.or.jp

Published

2011-11-09

Last modified

2024-09-16

Weaknesses

CWE-287

Affected products

• Acm5000 Console Server (Opengear)
• Cm4000 Console Server (Opengear)
• Im4004-5 Console Server (Opengear)
• Im4200 Console Server (Opengear)
• Img4000 Console Server (Opengear)
• Kcs6000 Rackside Console Server (Opengear)
• Opengear Console Server Firmware (Opengear)

References

• http://jvn.jp/en/jp/JVN71349007/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2011-000096