Vulnerability Details : CVE-2014-0343
The web interface on Virtual Access GW6110A routers with software 9.00 before 9.09.27, 9.50 before 9.50.21, and 10.00 before 10.00.21 allows remote authenticated users to gain privileges via a modified JavaScript variable.
Exploit prediction scoring system (EPSS) score for CVE-2014-0343
Probability of exploitation activity in the next 30 days: 0.15%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 50 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2014-0343
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
4.9
|
MEDIUM | AV:A/AC:M/Au:S/C:P/I:P/A:P |
4.4
|
6.4
|
NIST |
References for CVE-2014-0343
-
http://www.kb.cert.org/vuls/id/213046
VU#213046 - Virtual Access GW6110A router privilege escalation vulnerabilityUS Government Resource
Products affected by CVE-2014-0343
- cpe:2.3:o:virtualaccess:gw6110a_firmware:10.00:*:*:*:*:*:*:*
- cpe:2.3:o:virtualaccess:gw6110a_firmware:9.00:*:*:*:*:*:*:*
- cpe:2.3:o:virtualaccess:gw6110a_firmware:9.50:*:*:*:*:*:*:*
- cpe:2.3:h:virtualaccess:gw6110a:-:*:*:*:*:*:*:*