GCVE-110-CERTCC-2016-167623

Advisory PublishedCVSS 9.3/10

Vulnetix · Advisory published January 31, 2017

SHDesigns' Resident Download Manager (as well as the Ethernet Download Manager) does not authenticate firmware downloads before executing code and deploying them to devices.

Download JSON Open in Console

Risk Scores

CVSS 2.0

9.3/10

Critical · AV:N/AC:M/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score8remediation_levelUreport_confidenceURenvironmental_score5.9842549872target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND