CVE-2017-5136

High

Published: 05/02/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An issue was discovered on SendQuick Entera and Avera devices before version 2HF16, where the application failed to check access control, potentially allowing an attacker to shutdown the system.

Risk Assessment

The lack of proper access control poses a risk of unauthorized system shutdown, which could lead to downtime and data loss.

Recommendation

It is recommended to update devices to version 2HF16 or later and implement additional security measures for access control.

Other vulnerabilities in SendQuick Entera and Avera devices

CVE-2016-10098Critical
An issue was discovered on SendQuick Entera and Avera devices before 2HF16. Multiple Command Injection vulnerabilities allow attackers to execute arbitrary system commands.

Original NVD description (English source)

An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application failed to check the access control of the request which could result in an attacker being able to shutdown the system.