Vulnerability Details CVE-2018-0681
Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) uses hard-coded credentials, which may allow remote attackers to login to the Management page and change the configuration.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 76.9%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://jvn.jp/en/jp/JVN00344155/index.html
- https://www.denbun.com/en/imap/support/security/181003.html
- https://www.denbun.com/en/pop/support/security/181003.html
- http://jvn.jp/en/jp/JVN00344155/index.html
- https://www.denbun.com/en/imap/support/security/181003.html
- https://www.denbun.com/en/pop/support/security/181003.html
Products affected by CVE-2018-0681
-
cpe:2.3:a:neo:debun_imap:3.3i_r1.0
-
cpe:2.3:a:neo:debun_imap:3.3i_r1.3
-
cpe:2.3:a:neo:debun_imap:3.3i_r4.0
-
cpe:2.3:a:neo:debun_pop:3.3p_r1.0
-
cpe:2.3:a:neo:debun_pop:3.3p_r1.3
-
cpe:2.3:a:neo:debun_pop:3.3p_r4.0