Medium severity · published Nov 17, 2017
CVE-2017-10890
Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmware versions prior to 79.17.17.09,…
4.6
CVSS
0.4%
EPSS
No
On KEV
Description
Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmware versions prior to 79.17.17.09, RX-CLV2-B firmware versions prior to 89.07.17.09, RX-CLV3-N firmware versions prior to 91.09.17.10 allows an attacker on the same LAN to perform arbitrary operations or access information via unspecified vectors.
CVSS vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RF
Rx-clv1-p Firmware · Sharp
before 79.17.17.09 · source: NVD
RF
Rx-clv2-b Firmware · Sharp
before 89.07.17.09 · source: NVD
RF
Rx-clv3-n Firmware · Sharp
before 91.09.17.10 · source: NVD
RF
Rx-v100 Firmware · Sharp
before 03.29.17.09 · source: NVD
RF
Rx-v200 Firmware · Sharp
before 09.87.17.09 · source: NVD