PT-2016-4642
CVE-2016-1206
·
Published
2016-05-14
·
Updated
2016-05-18
Description by
CVSS 2.0
3.3
LowMetricsAV:A/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices (affected versions not specified)
Description
The issue concerns the WPS implementation, which does not limit PIN guesses. This allows remote attackers to obtain network access via a brute-force attack.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾