CVE-2018-17923

MEDIUM

sagaradio saga1-l8b_firmware < a0.10 - Improper Authentication

Title source: llm
STIX 2.1

Description

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access to the product may able to reprogram it.

References (2)

Core 2
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-18-296-02
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/105729

Scores

CVSS v3 6.9
EPSS 0.0033
EPSS Percentile 24.5%
Attack Vector PHYSICAL
CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-287
Status published
Products (1)
sagaradio/saga1-l8b_firmware < a0.10
Published Oct 24, 2018
Tracked Since Feb 18, 2026