CVE-2018-17923 - AskarLabs CVE Database

CVE-2018-17923

Vendor Gain Electronic Co. Ltd

Product SAGA1-L8B

Weakness CWE-287 · Improper authentication

Published October 24, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access to the product may able to reprogram it.

Key dates

02Disclosure timeline

October 24, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-17923 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Related vulnerabilities

04Related CVE

CVE-2024-11186 On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-prem CVE-2024-36402 Unauthenticated writes to the media repository allow planting of problematic content in Matrix Media Repo CVE-2025-22146 Improper authentication on SAML SSO process allows user impersonation in sentry CVE-2026-45434 Apache OFBiz: Authentication Bypass via Password-Change Logic Flaw Leading to RCE CVE-2025-52572 Hikka vulnerable to RCE through dangling web interface