What is the CVSS score of CVE-2015-7911?

CVE-2015-7911 has a CVSS 3.0 base score of 9.1 (Critical). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.8%.

Is there a patch available for CVE-2015-7911?

Yes, a patch is available for CVE-2015-7911. Update the affected software to the latest version immediately.

Pcd7 D4Xxv Vga Mb Firmware CVE-2015-7911

CRITICAL

Credentials Management Errors (CWE-255)

2015-12-23 ics-cert@hq.dhs.gov

Authentication Bypass Pcd7 D4Xxv Vga Mb Firmware Pcd7 D4Xxd Firmware Pcd3 Mxxx0 Firmware Pcd7 D4Xxd Svga Mb Firmware Pcd3 T666 Firmware Pcd1 M2Xx0 Firmware Pcd3 Mxx60 Firmware Pcd3 T665 Firmware Pcd2 M5Xx0 Firmware Pcd7 D4Xxwtpf Wvga Mb Firmware Pcd7 D4Xxwtpf Firmware Pcd1 M0Xx0 Firmware Pcd7 D4Xxxt5F Firmware Pcd7 D4Xxv Firmware

9.1

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

CVE Published

Dec 23, 2015 - 03:59 cve.org

CRITICAL 9.1

DescriptionCVE.org

Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices before 1.24.50 and PCD3.T665 and PCD3.T666 devices before 1.24.41 have hardcoded credentials, which allows remote attackers to obtain administrative access via an FTP session.

AnalysisAI

Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices before 1.24.50 and PCD3.T665 and PCD3.T666 devices before. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-255. Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices before 1.24.50 and PCD3.T665 and PCD3.T666 devices before 1.24.41 have hardcoded credentials, which allows remote attackers to obtain administrative access via an FTP session. Affected products include: Saia Burgess Controls Pcd7.D4Xxv Vga Mb Firmware, Saia Burgess Controls Pcd7.D4Xxd Firmware, Saia Burgess Controls Pcd3.Mxxx0 Firmware, Saia Burgess Controls Pcd7.D4Xxd Svga Mb Firmware, Saia Burgess Controls Pcd3.T666 Firmware. Version information: before 1.24.50.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.