CVE-2018-17932

JUUKO K-800 (Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc.) is vulnerable to a replay attack and command forgery, which could allow attackers to replay commands, control the device, view commands, or cause the device to stop running.

Score

CVSS 3.1 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2020-11-02

Last modified

2024-08-05

Weaknesses

CWE-294

Affected products

• K-800 Firmware (Juuko)

References

• https://us-cert.cisa.gov/ics/advisories/icsa-20-301-01