2 lines
4.5 KiB
JSON
2 lines
4.5 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"UNITY","vendor":"Ligowave","versions":[{"lessThanOrEqual":"6.95-2","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"PRO","vendor":"Ligowave","versions":[{"lessThanOrEqual":"6.95-1.rt3883","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"MIMO","vendor":"Ligowave","versions":[{"lessThanOrEqual":"6.95-1.rt2880","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"APC Propeller","vendor":"Ligowave","versions":[{"lessThanOrEqual":"2-5.95-4.rt3352","status":"affected","version":"0","versionType":"semver"}]}],"source":"research@onekey.com"},{"affectedData":[{"cpes":["cpe:2.3:h:ligowave:unity:6.95-2:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"unity","vendor":"ligowave","versions":[{"status":"affected","version":"6.95-2"}]},{"cpes":["cpe:2.3:h:ligowave:pro:6.95-1.rt3883:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"pro","vendor":"ligowave","versions":[{"status":"affected","version":"6.95-1.rt3883"}]},{"cpes":["cpe:2.3:h:ligowave:mimo:6.95-1.rt2880:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"mimo","vendor":"ligowave","versions":[{"status":"affected","version":"6.95-1.rt2880"}]},{"cpes":["cpe:2.3:h:ligowave:apc_propeller:2-5.95-4.rt3352:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"apc_propeller","vendor":"ligowave","versions":[{"status":"affected","version":"2-5.95-4.rt3352"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote attacker to execute arbitrary commands with elevated privileges.This issue affects UNITY: through 6.95-2; PRO: through 6.95-1.Rt3883; MIMO: through 6.95-1.Rt2880; APC Propeller: through 2-5.95-4.Rt3352."},{"lang":"es","value":"Una vulnerabilidad en la interfaz de administración basada en web de múltiples dispositivos Ligowave podría permitir que un atacante remoto autenticado ejecute comandos arbitrarios con privilegios elevados. Este problema afecta a UNITY: hasta 6.95-2; PRO: hasta 6.95-1.Rt3883; MIMO: hasta 6.95-1.Rt2880; APC Propeller: hasta 2-5.95-4.Rt3352."}],"id":"CVE-2024-4999","lastModified":"2026-06-17T08:03:21.260","metrics":{"cvssMetricV40":[{"cvssData":{"Automatable":"YES","Recovery":"USER","Safety":"NEGLIGIBLE","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","availabilityRequirement":"NOT_DEFINED","baseScore":9.4,"baseSeverity":"CRITICAL","confidentialityRequirement":"NOT_DEFINED","exploitMaturity":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"AMBER","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"MODERATE"},"source":"research@onekey.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-4999","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-05-16T15:17:05.688626Z","version":"2.0.3"}}]},"published":"2024-05-16T13:15:48.357","references":[{"source":"research@onekey.com","url":"https://onekey.com/blog/security-advisory-remote-code-execution-in-ligowave-devices/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://onekey.com/blog/security-advisory-remote-code-execution-in-ligowave-devices/"}],"sourceIdentifier":"research@onekey.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-77"}],"source":"research@onekey.com","type":"Secondary"}]}
|