What is CVE-2018-0676?

CVE-2018-0676 is a high-severity vulnerability in Panasonic Bn-Sdwbp3, classified under Improper Authentication. CVSS score: 8.8/10. Published 2019-01-09.

How severe is CVE-2018-0676?

High severity. CVSS v3 base score is 8.8 out of 10.

Auth bypass in Panasonic Bn-Sdwbp3

CVE-2018-0676

BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to bypass authentication to access to the management screen and execute an arbitrary command via unspecified vectors.

Vulnerability class: Broken Authentication

EPSS: 0.006 (46.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Panasonic Bn-sdwbp3
Panasonic Bn-sdwbp3_firmware
Panasonic Corporation Bn-sdwbp3 — versions firmware version 1.0.9 and earlier

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

vultures@jpcert.or.jp (Third Party Advisory, x_refsource_JVN, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2018-0676?: CVE-2018-0676 is a high-severity vulnerability in Panasonic Bn-Sdwbp3, classified under Improper Authentication. CVSS score: 8.8/10. Published 2019-01-09.
How severe is CVE-2018-0676?: High severity. CVSS v3 base score is 8.8 out of 10.