What is the CVSS score of CVE-2018-5449?

CVE-2018-5449 has a CVSS 3.0 base score of 6.5 (Medium). CVSS vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.5%.

Oncell G3150 Hspa T Firmware CVE-2018-5449

MEDIUM

NULL Pointer Dereference (CWE-476)

2018-03-05 ics-cert@hq.dhs.gov

Null Pointer Dereference Denial Of Service Oncell G3150 Hspa T Firmware Oncell G3110 Hspa T Firmware Oncell G3150 Hspa Firmware Oncell G3110 Hspa Firmware

6.5

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Mar 05, 2018 - 17:29 nvd

MEDIUM 6.5

DescriptionNVD

A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application does not check for a NULL value, allowing for an attacker to perform a denial of service attack.

AnalysisAI

A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as NULL Pointer Dereference (CWE-476), which allows attackers to crash the application by dereferencing a null pointer. A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application does not check for a NULL value, allowing for an attacker to perform a denial of service attack. Affected products include: Moxa Oncell G3150-Hspa-T Firmware, Moxa Oncell G3110-Hspa-T Firmware, Moxa Oncell G3150-Hspa Firmware, Moxa Oncell G3110-Hspa Firmware. Version information: version 1.4.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Check pointers before dereferencing. Use static analysis tools to detect null pointer paths.