CVE-2019-5914

V20 PRO L-01J software version L01J20c and L01J20d has a NULL pointer exception flaw that can be used by an attacker to cause the device to crash on the same network range via a specially crafted access point.

CVSS v3 5.3 MEDIUM
CVSS v2.0 5.7 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector : AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability : 1.6 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

5.7^/10

CVSS v2.0 : MEDIUM

Vector : AV:A/AC:M/Au:N/C:N/I:N/A:C

Exploitability : 5.5 / Impact : 6.9

Access Vector ADJACENT_NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://jvn.jp/en/jp/JVN40439414/index.html	Third Party Advisory
https://www.nttdocomo.co.jp/support/utilization/product_update/list/l01j/index.html	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:nttdocomo:v20_pro_l-01j_firmware:l01j20c:::::::*
	cpe:2.3:o:nttdocomo:v20_pro_l-01j_firmware:l01j20d:::::::*

cpe:2.3:h:nttdocomo:v20_pro_l-01j:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-02-13 18:29

Updated : 2019-02-15 13:24

NVD link : CVE-2019-5914

Mitre link : CVE-2019-5914

CVE.ORG link : CVE-2019-5914

JSON object : View

Products Affected

nttdocomo

v20_pro_l-01j_firmware
v20_pro_l-01j

CWE

CWE-476

NULL Pointer Dereference

{"id": "CVE-2019-5914", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.7, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:M/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 5.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.6}]}, "published": "2019-02-13T18:29:00.980", "references": [{"url": "http://jvn.jp/en/jp/JVN40439414/index.html", "tags": ["Third Party Advisory"], "source": "vultures@jpcert.or.jp"}, {"url": "https://www.nttdocomo.co.jp/support/utilization/product_update/list/l01j/index.html", "tags": ["Vendor Advisory"], "source": "vultures@jpcert.or.jp"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-476"}]}], "descriptions": [{"lang": "en", "value": "V20 PRO L-01J software version L01J20c and L01J20d has a NULL pointer exception flaw that can be used by an attacker to cause the device to crash on the same network range via a specially crafted access point."}, {"lang": "es", "value": "V20 PRO L-01J, en versiones de software L01J20c y L01J20d, tiene un error de excepci\u00f3n de puntero NULL que puede ser empleado por un atacante para provocar que el dispositivo se cierre inesperadamente en el mismo rango de red mediante un punto de acceso especialmente manipulado."}], "lastModified": "2019-02-15T13:24:29.297", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:nttdocomo:v20_pro_l-01j_firmware:l01j20c:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C0AEE1A-224E-43A5-8AA8-DE610344BD0C"}, {"criteria": "cpe:2.3:o:nttdocomo:v20_pro_l-01j_firmware:l01j20d:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "866970A1-F32D-4729-B03D-40DDC9DD35D3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:nttdocomo:v20_pro_l-01j:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A02C370E-4659-44D6-872B-ECEAC94FF52F"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "vultures@jpcert.or.jp"}