10
CVSSv2

CVE-2014-7279

Published: 23/03/2017 Updated: 28/03/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote malicious users to obtain "equipment management authority" via TCP traffic to port 23.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

kankunit konke_smart_plug_firmware k

Exploits

----------------------------------------------------------------------- Konke Smart Plug Authentication Bypass Vulnerability ----------------------------------------------------------------------- Author : gamehacker&zixian Mail : gh<gh@waloudongorg>&zixian<me@zixianorg> Date : Oct, 17-2014 Vendor ...
Konke Smart Plug suffers from an authentication bypass vulnerability ...