CVE-2018-13324

Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified…

mitre·CWE-863·Published 2018-11-26

CVSS

—

EPSS

0.23

KEV

Exploits

cve.orgen

157 chars

Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified HTTP Host header.

NVDen

157 chars

Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified HTTP Host header.

NVDes

193 chars

El control de acceso incorrecto en nasapi, en la versión 3.61.-0.10 de Buffalo TS5600D1206, permite a los atacantes omitir la autenticación, enviando una cabecera modificada del tipo HTTP Host.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.0	Primary	NVD	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H