CVE-2017-11400

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00

published November 20, 2017

CVSS
—
EPSS
0%
Percentile
18.6
In the wild
Unconfirmed
What it is

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete firmware signature allows a local attacker to upgrade the equipment (kernel, file system) with unsigned, attacker-controlled, data. This occurs because the appliance_config file is signed but the .tar.sec file is unsigned.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.6th percentile
Published
2017-11-20T15:00Z
EPSS history
Timeline
  • 20 NOV 15:00Z
    An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00
    cvelistv5