Vulnerability in Virtualaccess Gw6110a

CVE-2014-0343

The web interface on Virtual Access GW6110A routers with software 9.00 before 9.09.27, 9.50 before 9.50.21, and 10.00 before 10.00.21 allows remote authenticated users to gain privileges via a modified JavaScript variable.

EPSS: 0.006 (45.5th percentile) — read the EPSS interpretation.

Affected products

Virtualaccess Gw6110a
Virtualaccess Gw6110a_firmware — versions 9.00, 9.50, 10.00
N/a — versions n/a

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)