CVE-2017-2277

WG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or alter information stored in the external storage connected to the…

published July 22, 2017

CVSS
—
EPSS
1%
Percentile
64.5
In the wild
Unconfirmed
What it is

⚠️ A sneaky vulnerability in WG-C10 versions up to 3.0.79 lets attackers sneak past access restrictions! 💥 Think of it like a restaurant without a proper check-in system — anyone can walk in and access the kitchen, potentially altering any dish being prepared. In this case, the external storage connected to the product is that vulnerable kitchen, ripe for unauthorized access. An attacker could manipulate or steal sensitive information stored on external devices connected to the WG-C10. This could lead to significant data breaches or unauthorized changes to critical files, resulting in chaos for users who rely on the integrity of their data.

Put simply

Think of it like a restaurant without a proper check-in system — anyone can walk in and access the kitchen, potentially altering any dish being prepared. In this case, the external storage connected to the product is that vulnerable kitchen, ripe for unauthorized access. This vulnerability allows unauthorized access to information in external storage due to a lack of appropriate access controls in WG-C10. Attackers can exploit unspecified vectors to alter or retrieve data without proper authorization.

What to do

An attacker could manipulate or steal sensitive information stored on external devices connected to the WG-C10. This could lead to significant data breaches or unauthorized changes to critical files, resulting in chaos for users who rely on the integrity of their data. To protect against this, immediately update to the latest version of the WG-C10 firmware, which addresses these access issues. Additionally, review and apply stricter access controls on any connected external storage to mitigate risks. You've got this! With these steps, you’ll have your system secured in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01075 · 64.5th percentile
Published
2017-07-22T00:00Z
EPSS history
Timeline
  • 22 JUL 00:00Z
    WG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or alter information stored in the external storage connected to the…
    cvelistv5