CVE-2017-5544

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-5544
An issue was discovered on FiberHome Fengine S5800 switches V210R240. An unauthorized attacker can access the device's SSH service, using a password cracking tool to establish SSH connections quickly. This will trigger an increase in the SSH login timeout (each of the login attempts will occupy a connection slot for a longer time). Once this occurs, legitimate login attempts via SSH/telnet will be refused, resulting in a denial of service; you must restart the device.

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.1 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability : 8.6 / Impact : 6.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References
Link Resource
http://www.nfcwar.com URL Repurposed
http://www.securityfocus.com/bid/95708 Third Party Advisory VDB Entry
http://www.nfcwar.com URL Repurposed
http://www.securityfocus.com/bid/95708 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:fiberhome:fengine_s5800_firmware:v210r240:*:*:*:*:*:*:*
OR cpe:2.3:h:fiberhome:fengine_28f-s:-:*:*:*:*:*:*:*
cpe:2.3:h:fiberhome:fengine_52f-s:-:*:*:*:*:*:*:*
cpe:2.3:h:fiberhome:fengine_52t-s:-:*:*:*:*:*:*:*
cpe:2.3:h:fiberhome:fengine_s5800-28t-s:-:*:*:*:*:*:*:*
cpe:2.3:h:fiberhome:fengine_s5800-28t-s-pe:-:*:*:*:*:*:*:*
History

21 Nov 2024, 03:27

Type Values Removed Values Added
References () http://www.nfcwar.com - URL Repurposed () http://www.nfcwar.com - URL Repurposed
References () http://www.securityfocus.com/bid/95708 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/95708 - Third Party Advisory, VDB Entry

09 Sep 2021, 01:23

Type Values Removed Values Added
References (MISC) http://www.nfcwar.com - Third Party Advisory (MISC) http://www.nfcwar.com - URL Repurposed

02 Jul 2021, 20:20

Type Values Removed Values Added
CPE cpe:2.3:h:fiberhomegroup:fengine_s5800-28t-s:-:*:*:*:*:*:*:*
cpe:2.3:h:fiberhomegroup:fengine_28f-s:-:*:*:*:*:*:*:*
cpe:2.3:h:fiberhomegroup:fengine_52t-s:-:*:*:*:*:*:*:*
cpe:2.3:h:fiberhomegroup:fengine_s5800-28t-s-pe:-:*:*:*:*:*:*:*
cpe:2.3:o:fiberhomegroup:fengine_s5800_firmware:v210r240:*:*:*:*:*:*:*
cpe:2.3:h:fiberhomegroup:fengine_52f-s:-:*:*:*:*:*:*:*		 cpe:2.3:h:fiberhome:fengine_52t-s:-:*:*:*:*:*:*:*
cpe:2.3:h:fiberhome:fengine_s5800-28t-s:-:*:*:*:*:*:*:*
cpe:2.3:h:fiberhome:fengine_52f-s:-:*:*:*:*:*:*:*
cpe:2.3:h:fiberhome:fengine_s5800-28t-s-pe:-:*:*:*:*:*:*:*
cpe:2.3:o:fiberhome:fengine_s5800_firmware:v210r240:*:*:*:*:*:*:*
cpe:2.3:h:fiberhome:fengine_28f-s:-:*:*:*:*:*:*:*
Information

Published : 2017-01-23 07:59

Updated : 2024-11-21 03:27

NVD link : CVE-2017-5544

Mitre link : CVE-2017-5544

CVE.ORG link : CVE-2017-5544

JSON object : View

Products Affected

fiberhome

  • fengine_52t-s
  • fengine_28f-s
  • fengine_s5800-28t-s
  • fengine_52f-s
  • fengine_s5800-28t-s-pe
  • fengine_s5800_firmware
CWE
CWE-400

Uncontrolled Resource Consumption