CVE-2018-17903

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery.

Score

CVSS 3.1 9.1 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-10-24

Last modified

2024-09-16

Weaknesses

CWE-294

Affected products

• Saga1-l8b (Gain Electronic Co. Ltd)
• Saga1-l8b Firmware (Sagaradio)

References

• http://www.securityfocus.com/bid/105729
• https://ics-cert.us-cert.gov/advisories/ICSA-18-296-02