CVE-2018-16499

In VOS compromised, an attacker at network endpoints can possibly view communications between an unsuspecting user and the service using man-in-the-middle attacks. Usage of unapproved SSH encryption protocols or cipher suites also violates the Data Protection TSR (Technical Security Requirements).

Score

CVSS 3.1 5.9 Medium

Status

Modified - support@hackerone.com

Published

2021-05-26

Last modified

2024-08-05

Weaknesses

CWE-326

Affected products

• Versa Operating System (Versa-networks)

References

• https://hackerone.com/reports/1168196