<?xml version="1.0" encoding="UTF-8"?>
<VrdaData refvuldefversion="1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://vrda.jpcert.or.jp" xsi:schemaLocation="http://vrda.jpcert.or.jp/feed/xsd/vrda_data.xsd">
  <VrdaDataProvider>
    <Name>JVN iPedia</Name>
    <URL>http://jvndb.jvn.jp</URL>
  </VrdaDataProvider>
  <VrdaDataSourceType>Advisory</VrdaDataSourceType>
  <Vulinfo lang="ja" revisionno="1" invalidated="false">
    <VulinfoID>JVNDB-2021-019272</VulinfoID>
    <VulinfoData>
      <Title>claro &#12398; kaon cg3000 &#12501;&#12449;&#12540;&#12512;&#12454;&#12455;&#12450;&#12395;&#12362;&#12369;&#12427;&#37325;&#35201;&#12394;&#27231;&#33021;&#12395;&#23550;&#12377;&#12427;&#35469;&#35388;&#12398;&#27424;&#22914;&#12395;&#38306;&#12377;&#12427;&#33030;&#24369;&#24615;</Title>
      <VulinfoDescription>
        <Overview>claro &#12398; kaon cg3000 &#12501;&#12449;&#12540;&#12512;&#12454;&#12455;&#12450;&#12395;&#12399;&#12289;&#37325;&#35201;&#12394;&#27231;&#33021;&#12395;&#23550;&#12377;&#12427;&#35469;&#35388;&#12398;&#27424;&#22914;&#12395;&#38306;&#12377;&#12427;&#33030;&#24369;&#24615;&#12364;&#23384;&#22312;&#12375;&#12414;&#12377;&#12290;</Overview>
      </VulinfoDescription>
      <Affected>
        <AffectedItem affectedstatus="vulnerable">
          <Lapt>cpe:/o:claro:kaon_cg3000_firmware</Lapt>
        </AffectedItem>
      </Affected>
      <FactAnalysis>
        <AccessComplexity>Low</AccessComplexity>
        <Authentication>Single Instance</Authentication>
        <AvailabilityImpact>Partial</AvailabilityImpact>
        <ConfidentialityImpact>Partial</ConfidentialityImpact>
        <IntegrityImpact>Partial</IntegrityImpact>
      </FactAnalysis>
      <Related>
        <RelatedItem origin="jvnipedia" relationtype="self">
          <URL>https://jvndb.jvn.jp/ja/contents/2021/JVNDB-2021-019272.html</URL>
        </RelatedItem>
        <RelatedItem origin="other" relationtype="alternate">
          <Name>Common Vulnerabilities and Exposures (CVE)</Name>
          <VulinfoID>CVE-2021-43483</VulinfoID>
          <URL>https://www.cve.org/CVERecord?id=CVE-2021-43483</URL>
        </RelatedItem>
        <RelatedItem origin="other" relationtype="alternate">
          <Name>National Vulnerability Database (NVD)</Name>
          <VulinfoID>CVE-2021-43483</VulinfoID>
          <URL>https://nvd.nist.gov/vuln/detail/CVE-2021-43483</URL>
        </RelatedItem>
        <RelatedItem origin="other" relationtype="reference">
          <Name>JVNDB</Name>
          <VulinfoID>CWE-306</VulinfoID>
          <Title>&#37325;&#35201;&#12394;&#27231;&#33021;&#12395;&#23550;&#12377;&#12427;&#35469;&#35388;&#12398;&#27424;&#22914;</Title>
          <URL>https://cwe.mitre.org/data/definitions/306.html</URL>
        </RelatedItem>
        <RelatedItem origin="other" relationtype="reference">
          <Name>&#38306;&#36899;&#25991;&#26360;</Name>
          <VulinfoID>alexandrevvo.medium.com (improper-access-control-no-control-at-all-in-kaon-cg3000-router-c225d2434ec1)</VulinfoID>
          <URL>https://alexandrevvo.medium.com/improper-access-control-no-control-at-all-in-kaon-cg3000-router-c225d2434ec1</URL>
        </RelatedItem>
      </Related>
      <DateFirstPublished>2023-07-21T17:19:18+09:00</DateFirstPublished>
      <DateLastUpdated>2023-07-21T17:19:18+09:00</DateLastUpdated>
    </VulinfoData>
  </Vulinfo>
</VrdaData>
