CVE-2018-17923 - CVE House
Back to Database
Status published Medium CVE-2018-17923

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable...

Vulnerability Description

SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access to the product may able to reprogram it.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-17923

Credits & Attribution

No credits recorded in the NVD database.

References

More from GAIN Electronic Co. Ltd

View All →
CVE-2018-17921
SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable...
High 8.8
CVE-2018-17903
SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable...
Critical 9.1

Affected Vendor

GAIN Electronic Co. Ltd

View all reports →

Affected Software

SAGA1-L8B
Vulnerable Versions:
All firmware versions prior to A0.10

Timeline

Official Publish: October 24th, 2018
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-287

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1556 Modify Authentication Process
Credential Access