ByteOS Network

NVD Vulnerability Details :

CVE-2019-3404

Analyzed

Source-security@360.cn

Published At-04 Mar, 2020 | 14:15

Updated At-24 Aug, 2020 | 17:37

By adding some special fields to the uri ofrouter app function, the user could abuse background app cgi functions withoutauthentication. This affects 360 router P0 and F5C.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N

CPE Matches

360>>p0_router_firmware>>3.1.1.65150

cpe:2.3:o:360:p0_router_firmware:3.1.1.65150:*:*:*:*:*:*:*

360>>p0_router>>-

cpe:2.3:h:360:p0_router:-:*:*:*:*:*:*:*

360>>f5c_router_firmware>>3.1.1.65150

cpe:2.3:o:360:f5c_router_firmware:3.1.1.65150:*:*:*:*:*:*:*

360>>f5c_router>>-

cpe:2.3:h:360:f5c_router:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://security.360.cn/News/news/id/218.html	security@360.cn	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History