CVE-2019-5914

{"id": "CVE-2019-5914", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.7, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:M/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 5.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.6}]}, "published": "2019-02-13T18:29:00.980", "references": [{"url": "http://jvn.jp/en/jp/JVN40439414/index.html", "tags": ["Third Party Advisory"], "source": "vultures@jpcert.or.jp"}, {"url": "https://www.nttdocomo.co.jp/support/utilization/product_update/list/l01j/index.html", "tags": ["Vendor Advisory"], "source": "vultures@jpcert.or.jp"}, {"url": "http://jvn.jp/en/jp/JVN40439414/index.html", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.nttdocomo.co.jp/support/utilization/product_update/list/l01j/index.html", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-476"}]}], "descriptions": [{"lang": "en", "value": "V20 PRO L-01J software version L01J20c and L01J20d has a NULL pointer exception flaw that can be used by an attacker to cause the device to crash on the same network range via a specially crafted access point."}, {"lang": "es", "value": "V20 PRO L-01J, en versiones de software L01J20c y L01J20d, tiene un error de excepci\u00f3n de puntero NULL que puede ser empleado por un atacante para provocar que el dispositivo se cierre inesperadamente en el mismo rango de red mediante un punto de acceso especialmente manipulado."}], "lastModified": "2024-11-21T04:45:44.250", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:nttdocomo:v20_pro_l-01j_firmware:l01j20c:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C0AEE1A-224E-43A5-8AA8-DE610344BD0C"}, {"criteria": "cpe:2.3:o:nttdocomo:v20_pro_l-01j_firmware:l01j20d:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "866970A1-F32D-4729-B03D-40DDC9DD35D3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:nttdocomo:v20_pro_l-01j:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A02C370E-4659-44D6-872B-ECEAC94FF52F"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "vultures@jpcert.or.jp"}