« Volver al listado

CVE-2011-3997

Estado: ModificadaAlta (7.5)—

Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected equipment, via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (7)

Opengear — Acm5000 Console ServerOpengear — Cm4000 Console ServerOpengear — Im4004-5 Console ServerOpengear — Im4200 Console ServerOpengear — Img4000 Console ServerOpengear — Kcs6000 Rackside Console ServerOpengear — Opengear Console Server Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-3997",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-11-09T20:55:01.587",
  "references": [
    {
      "url": "http://jvn.jp/en/jp/JVN71349007/index.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2011-000096",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvn.jp/en/jp/JVN71349007/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2011-000096",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected equipment, via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Opengear console con firmware anterior a v2.2.1, permite a atacantes remotos evitar la autenticación y modificar características o acceder a equipos conectados a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:34:16.770",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:opengear:opengear_console_server_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3B39748-D797-4599-855C-6906D91CA5E9",
              "versionEndIncluding": "2.1.0u7"
            },
            {
              "criteria": "cpe:2.3:a:opengear:opengear_console_server_firmware:2.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "38B00DB4-FA1D-455B-BF53-DC93B447976F"
            },
            {
              "criteria": "cpe:2.3:a:opengear:opengear_console_server_firmware:2.0.4u1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "83A11D76-9091-4FC4-8DDA-79250620BBE5"
            },
            {
              "criteria": "cpe:2.3:a:opengear:opengear_console_server_firmware:2.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CFF8CBC0-5716-425C-985F-0C08D033196C"
            },
            {
              "criteria": "cpe:2.3:a:opengear:opengear_console_server_firmware:2.0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F6163D4-400B-4CB5-9ED4-0A08D71A855D"
            },
            {
              "criteria": "cpe:2.3:a:opengear:opengear_console_server_firmware:2.0.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B73C1C3-096F-4D2C-879E-418E8EE6CB02"
            },
            {
              "criteria": "cpe:2.3:a:opengear:opengear_console_server_firmware:2.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2F3BF03-8317-4918-BB56-454C6763A98C"
            },
            {
              "criteria": "cpe:2.3:a:opengear:opengear_console_server_firmware:2.1.0u1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E170378-7AAB-4327-B3E8-BA950BBC17EB"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:opengear:acm5000_console_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87CF7575-740B-42A7-B65B-8BBC8F950778"
            },
            {
              "criteria": "cpe:2.3:h:opengear:cm4000_console_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "41AE0FC0-1715-4086-925F-9BB3218BDB69"
            },
            {
              "criteria": "cpe:2.3:h:opengear:im4004-5_console_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A95AD04A-6832-4EEE-9A38-96A324C15F45"
            },
            {
              "criteria": "cpe:2.3:h:opengear:im4200_console_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0A0FBE41-1103-4444-9440-1BF0A9A9D1BB"
            },
            {
              "criteria": "cpe:2.3:h:opengear:img4000_console_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE4AC1B6-CC27-4AA6-8DD8-F2BB90F93AC6"
            },
            {
              "criteria": "cpe:2.3:h:opengear:kcs6000_rackside_console_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99388420-B75A-4C94-A0FF-CA527358E635"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp"
}