The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 5.3 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | 3.9 | 1.4 |
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-311,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| cbc | gem | * |
Improper authentication vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 8.8 | HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 2.8 | 5.9 |
Products Affected
| Vendor | Product | Version |
|---|---|---|
| cbc | dr-16f45at_firmware | - |
| cbc | dr-8m52-av_firmware | - |
| cbc | dr-8f42a_firmware | - |
| cbc | dr-8h_firmware | - |
| cbc | nr-16f85-8pra_firmware | - |
| cbc | nr-16f82-16p_firmware | - |
| cbc | dr-4m51-av_firmware | - |
| cbc | nr-8f_firmware | - |
| cbc | nr8h_firmware | - |
| cbc | dr-8f45at_firmware | - |
| cbc | nr-16m_firmware | - |
| cbc | nr-4f_firmware | - |
| cbc | dr-16m52-av_firmware | - |
| cbc | nr8-8m72_firmware | - |
| cbc | nr16h_firmware | - |
| cbc | dr-4h_firmware | - |
| cbc | dr-16m52_firmware | - |
| cbc | dr-4fx1_firmware | - |
| cbc | drh8-4m41-a_firmware | - |
| cbc | dr-16f42a_firmware | - |
| cbc | nr8-4m71_firmware | - |
| cbc | dr-16h_firmware | - |
| cbc | nr4h_firmware | - |
OS command injection vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 8.8 | HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 2.8 | 5.9 |
Products Affected
| Vendor | Product | Version |
|---|---|---|
| cbc | dr-16f45at_firmware | - |
| cbc | dr-8m52-av_firmware | - |
| cbc | dr-8f42a_firmware | - |
| cbc | dr-8h_firmware | - |
| cbc | nr-16f85-8pra_firmware | - |
| cbc | nr-16f82-16p_firmware | - |
| cbc | dr-4m51-av_firmware | - |
| cbc | nr-8f_firmware | - |
| cbc | nr8h_firmware | - |
| cbc | dr-8f45at_firmware | - |
| cbc | nr-16m_firmware | - |
| cbc | nr-4f_firmware | - |
| cbc | dr-16m52-av_firmware | - |
| cbc | nr8-8m72_firmware | - |
| cbc | nr16h_firmware | - |
| cbc | dr-4h_firmware | - |
| cbc | dr-16m52_firmware | - |
| cbc | dr-4fx1_firmware | - |
| cbc | drh8-4m41-a_firmware | - |
| cbc | dr-16f42a_firmware | - |
| cbc | nr8-4m71_firmware | - |
| cbc | dr-16h_firmware | - |
| cbc | nr4h_firmware | - |
Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 8.8 | HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 2.8 | 5.9 |
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 8.8 | HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 2.8 | 5.9 |
Products Affected
| Vendor | Product | Version |
|---|---|---|
| cbc | dr-16f45at_firmware | - |
| cbc | dr-8m52-av_firmware | - |
| cbc | dr-8f42a_firmware | - |
| cbc | dr-8h_firmware | - |
| cbc | nr-16f85-8pra_firmware | - |
| cbc | nr-16f82-16p_firmware | - |
| cbc | dr-4m51-av_firmware | - |
| cbc | nr-8f_firmware | - |
| cbc | nr8h_firmware | - |
| cbc | dr-8f45at_firmware | - |
| cbc | nr-16m_firmware | - |
| cbc | nr-4f_firmware | - |
| cbc | dr-16m52-av_firmware | - |
| cbc | nr8-8m72_firmware | - |
| cbc | nr16h_firmware | - |
| cbc | dr-4h_firmware | - |
| cbc | dr-16m52_firmware | - |
| cbc | dr-4fx1_firmware | - |
| cbc | drh8-4m41-a_firmware | - |
| cbc | dr-16f42a_firmware | - |
| cbc | nr8-4m71_firmware | - |
| cbc | dr-16h_firmware | - |
| cbc | nr4h_firmware | - |