Home  >  CVE-2015-6019
CVE Details for CVE: CVE-2015-6019
Summary
The management portal on ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 does not terminate sessions upon a logout action, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation.
Timestamps
Last major update 07-12-2016 - 18:17
Published 31-12-2015 - 05:59
Last modified 07-12-2016 - 18:17
References
Vulnerable Configurations
  • cpe:2.3:o:zyxel:pmg5318-b20a_firmware:v100aanc0b5:*:*:*:*:*:*:*
    cpe:2.3:o:zyxel:pmg5318-b20a_firmware:v100aanc0b5:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
5.0
Impact
2.9
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
CVSS3
Base
8.5
Impact
4.7
Exploitability
3.1
Access
Attack ComplexityAttack vectorPrivileges RequiredScopeUser Interaction
LOW NETWORK LOW CHANGED NONE
Impact
ConfidentialityIntegrityAvailability
LOW HIGH NONE
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3-vector via4
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N
refmap via4
cert-vn VU#870744
confirm https://www.kb.cert.org/vuls/id/BLUU-9ZQU2R
sectrack 1034553