CVE-2017-10854
HIGHCorega CG-WGR1200 Firmware < 2.20 - Unauthenticated Password Change
Title source: llmDescription
Corega CG-WGR1200 firmware 2.20 and earlier allows an attacker to bypass authentication and change the login password via unspecified vectors.
References (2)
Core 2
Core References
Third Party Advisory third-party-advisory
x_refsource_jvn
https://jvn.jp/en/jp/JVN15201064/index.html
Mitigation, Vendor Advisory x_refsource_confirm
http://corega.jp/support/security/20180309_wgr1200.htm
Scores
CVSS v3
8.8
EPSS
0.0062
EPSS Percentile
45.0%
Attack Vector
ADJACENT_NETWORK
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-306
Status
published
Products (1)
corega/cg-wgr_1200_firmware
< 2.20
Published
Mar 09, 2018
Tracked Since
Feb 18, 2026