Overview
- Description
- Vulnerability in CIRCUTOR TCP2RS+ firmware version 1.3b, which could allow an attacker to modify any configuration value, even if the device has the user/password authentication option enabled, without authentication by sending packets through the UDP protocol and port 2000, deconfiguring the device and thus disabling its use. This equipment is at the end of its useful life cycle.
- Source
- cve-coordination@incibe.es
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 9.1
- Impact score
- 5.2
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- Severity
- CRITICAL
Weaknesses
- nvd@nist.gov
- NVD-CWE-noinfo
- cve-coordination@incibe.es
- CWE-20
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:circutor:tcp2rs\\+_firmware:1.3b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "522FE1C3-3EED-4EC0-B946-5ACD71ACF6DB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:circutor:tcp2rs\\+:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D3A95ECE-C9F7-477A-862E-EEFA050D4FE0"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]