CVE-2018-0677

MEDIUM

BN-SDWBP3 Firmware <= 1.0.9 - Authenticated OS Command Injection

Title source: llm
STIX 2.1

Description

BN-SDWBP3 firmware version 1.0.9 and earlier allows attacker with administrator rights on the same network segment to execute arbitrary OS commands via unspecified vectors.

References (2)

Core 2
Core References
Third Party Advisory third-party-advisory x_refsource_jvn
https://jvn.jp/en/jp/JVN65082538/index.html

Scores

CVSS v3 6.8
EPSS 0.0060
EPSS Percentile 44.2%
Attack Vector ADJACENT_NETWORK
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-78
Status published
Products (1)
panasonic/bn-sdwbp3_firmware < 1.0.9
Published Jan 09, 2019
Tracked Since Feb 18, 2026