Sign-up

ID

VAR-201711-0017


CVE

CVE-2016-6024


TITLE

IBM Jazz Information disclosure vulnerabilities in technology-based products

Trust: 0.8

sources: JVNDB: JVNDB-2016-008865

DESCRIPTION

IBM Jazz technology based products might divulge information that might be useful in helping attackers through error messages. IBM X-Force ID: 116868. Vendors have confirmed this vulnerability IBM X-Force ID: 116868 It is released as.Information may be obtained. NetCommWirelessWirelessRouter is a wireless router from NetComm Australia. A security vulnerability exists in NetCommWirelessWirelessRouter that allows a remote attacker to exploit a vulnerability to submit a special request to execute arbitrary commands in the context of an application

Trust: 2.43

sources: NVD: CVE-2016-6024 // JVNDB: JVNDB-2016-008865 // CNVD: CNVD-2017-02427 // BID: 96384

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2017-02427

AFFECTED PRODUCTS

vendor:ibmmodel:rational rhapsody design managerscope:eqversion:4.0.5

Trust: 1.6

vendor:ibmmodel:rational rhapsody design managerscope:eqversion:4.0.4

Trust: 1.6

vendor:ibmmodel:rational rhapsody design managerscope:eqversion:4.0.3

Trust: 1.6

vendor:ibmmodel:rational engineering lifecycle managerscope:eqversion:6.0.1

Trust: 1.6

vendor:ibmmodel:rational engineering lifecycle managerscope:eqversion:6.0.2

Trust: 1.6

vendor:ibmmodel:rational engineering lifecycle managerscope:eqversion:6.0.4

Trust: 1.6

vendor:ibmmodel:rational rhapsody design managerscope:eqversion:4.0.2

Trust: 1.6

vendor:ibmmodel:rational rhapsody design managerscope:eqversion:4.0

Trust: 1.6

vendor:ibmmodel:rational rhapsody design managerscope:eqversion:4.0.1

Trust: 1.6

vendor:ibmmodel:rational engineering lifecycle managerscope:eqversion:6.0.3

Trust: 1.6

vendor:ibmmodel:rational team concertscope:eqversion:4.0.3

Trust: 1.0

vendor:ibmmodel:rational rhapsody design managerscope:eqversion:5.0

Trust: 1.0

vendor:ibmmodel:rational collaborative lifecycle managementscope:eqversion:4.0.1

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:5.0.1

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:4.0.4

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:4.0.5

Trust: 1.0

vendor:ibmmodel:rational software architect design managerscope:eqversion:4.0.7

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:4.0.0.2

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:6.0

Trust: 1.0

vendor:ibmmodel:rational software architect design managerscope:eqversion:4.0.6

Trust: 1.0

vendor:ibmmodel:rational doors next generationscope:eqversion:4.0.5

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:6.0.2

Trust: 1.0

vendor:ibmmodel:rational doors next generationscope:eqversion:6.0.3

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:6.0.1

Trust: 1.0

vendor:ibmmodel:rational doors next generationscope:eqversion:6.0

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:4.0.1

Trust: 1.0

vendor:ibmmodel:rational software architect design managerscope:eqversion:5.0.2

Trust: 1.0

vendor:ibmmodel:rational software architect design managerscope:eqversion:4.0.2

Trust: 1.0

vendor:ibmmodel:rational collaborative lifecycle managementscope:eqversion:4.0.7

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:4.0.3

Trust: 1.0

vendor:ibmmodel:rational doors next generationscope:eqversion:6.0.2

Trust: 1.0

vendor:ibmmodel:rational engineering lifecycle managerscope:eqversion:4.0.7

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:5.0.1

Trust: 1.0

vendor:ibmmodel:rational rhapsody design managerscope:eqversion:6.0.3

Trust: 1.0

vendor:ibmmodel:rational doors next generationscope:eqversion:6.0.1

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:4.0.4

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:6.0.4

Trust: 1.0

vendor:ibmmodel:rational rhapsody design managerscope:eqversion:4.0.6

Trust: 1.0

vendor:ibmmodel:rational rhapsody design managerscope:eqversion:6.0

Trust: 1.0

vendor:ibmmodel:rational software architect design managerscope:eqversion:4.0

Trust: 1.0

vendor:ibmmodel:rational doors next generationscope:eqversion:4.0.3

Trust: 1.0

vendor:ibmmodel:rational doors next generationscope:eqversion:5.0.1

Trust: 1.0

vendor:ibmmodel:rational rhapsody design managerscope:eqversion:6.0.1

Trust: 1.0

vendor:ibmmodel:rational doors next generationscope:eqversion:4.0.4

Trust: 1.0

vendor:ibmmodel:rational doors next generationscope:eqversion:6.0.4

Trust: 1.0

vendor:ibmmodel:rational engineering lifecycle managerscope:eqversion:5.0.2

Trust: 1.0

vendor:ibmmodel:rational rhapsody design managerscope:eqversion:5.0.2

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:6.0

Trust: 1.0

vendor:ibmmodel:rational collaborative lifecycle managementscope:eqversion:6.0.4

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:4.0.7

Trust: 1.0

vendor:ibmmodel:rational collaborative lifecycle managementscope:eqversion:4.0

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:6.0.2

Trust: 1.0

vendor:ibmmodel:rational rhapsody design managerscope:eqversion:5.0.1

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:4.0.1

Trust: 1.0

vendor:ibmmodel:rational collaborative lifecycle managementscope:eqversion:5.0

Trust: 1.0

vendor:ibmmodel:rational engineering lifecycle managerscope:eqversion:5.0

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:4.0.0.1

Trust: 1.0

vendor:ibmmodel:rational doors next generationscope:eqversion:4.0.1

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:6.0.4

Trust: 1.0

vendor:ibmmodel:rational software architect design managerscope:eqversion:4.0.5

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:4.0

Trust: 1.0

vendor:ibmmodel:rational software architect design managerscope:eqversion:6.0

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:4.0.7

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:5.0

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:6.0.3

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:4.0.6

Trust: 1.0

vendor:ibmmodel:rational collaborative lifecycle managementscope:eqversion:4.0.5

Trust: 1.0

vendor:ibmmodel:rational software architect design managerscope:eqversion:6.0.1

Trust: 1.0

vendor:ibmmodel:rational doors next generationscope:eqversion:4.0.7

Trust: 1.0

vendor:ibmmodel:rational engineering lifecycle managerscope:eqversion:4.0.5

Trust: 1.0

vendor:ibmmodel:rational collaborative lifecycle managementscope:eqversion:6.0.3

Trust: 1.0

vendor:ibmmodel:rational software architect design managerscope:eqversion:4.0.3

Trust: 1.0

vendor:ibmmodel:rational collaborative lifecycle managementscope:eqversion:6.0

Trust: 1.0

vendor:ibmmodel:rational collaborative lifecycle managementscope:eqversion:4.0.6

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:5.0.2

Trust: 1.0

vendor:ibmmodel:rational doors next generationscope:eqversion:4.0.6

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:4.0.2

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:4.0.0.1

Trust: 1.0

vendor:ibmmodel:rational software architect design managerscope:eqversion:5.0.1

Trust: 1.0

vendor:ibmmodel:rational software architect design managerscope:eqversion:4.0.4

Trust: 1.0

vendor:ibmmodel:rational engineering lifecycle managerscope:eqversion:6.0

Trust: 1.0

vendor:ibmmodel:rational engineering lifecycle managerscope:eqversion:4.0.6

Trust: 1.0

vendor:ibmmodel:rational rhapsody design managerscope:eqversion:4.0.7

Trust: 1.0

vendor:ibmmodel:rational rhapsody design managerscope:eqversion:6.0.2

Trust: 1.0

vendor:ibmmodel:rational collaborative lifecycle managementscope:eqversion:6.0.1

Trust: 1.0

vendor:ibmmodel:rational collaborative lifecycle managementscope:eqversion:5.0.2

Trust: 1.0

vendor:ibmmodel:rational doors next generationscope:eqversion:5.0.2

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:4.0

Trust: 1.0

vendor:ibmmodel:rational doors next generationscope:eqversion:4.0.2

Trust: 1.0

vendor:ibmmodel:rational collaborative lifecycle managementscope:eqversion:4.0.2

Trust: 1.0

vendor:ibmmodel:rational collaborative lifecycle managementscope:eqversion:4.0.3

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:4.0.5

Trust: 1.0

vendor:ibmmodel:rational collaborative lifecycle managementscope:eqversion:5.0.1

Trust: 1.0

vendor:ibmmodel:rational quality managerscope:eqversion:5.0

Trust: 1.0

vendor:ibmmodel:rational software architect design managerscope:eqversion:5.0

Trust: 1.0

vendor:ibmmodel:rational engineering lifecycle managerscope:eqversion:4.0.3

Trust: 1.0

vendor:ibmmodel:rational collaborative lifecycle managementscope:eqversion:4.0.4

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:4.0.0.2

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:6.0.3

Trust: 1.0

vendor:ibmmodel:rational engineering lifecycle managerscope:eqversion:5.0.1

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:4.0.6

Trust: 1.0

vendor:ibmmodel:rational rhapsody design managerscope:eqversion:6.0.4

Trust: 1.0

vendor:ibmmodel:rational engineering lifecycle managerscope:eqversion:4.0.4

Trust: 1.0

vendor:ibmmodel:rational software architect design managerscope:eqversion:4.0.1

Trust: 1.0

vendor:ibmmodel:rational doors next generationscope:eqversion:5.0

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:6.0.1

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:5.0.2

Trust: 1.0

vendor:ibmmodel:rational team concertscope:eqversion:4.0.2

Trust: 1.0

vendor:netcommmodel:wireless hspa 3g10wve-l101-s306etsscope: - version: -

Trust: 0.9

vendor:ibmmodel:rational collaborative lifecycle managementscope: - version: -

Trust: 0.8

vendor:ibmmodel:rational doors next generationscope: - version: -

Trust: 0.8

vendor:ibmmodel:rational engineering lifecycle managerscope: - version: -

Trust: 0.8

vendor:ibmmodel:rational quality managerscope: - version: -

Trust: 0.8

vendor:ibmmodel:rational rhapsody design managerscope: - version: -

Trust: 0.8

vendor:ibmmodel:rational software architect design managerscope: - version: -

Trust: 0.8

vendor:ibmmodel:rational team concertscope: - version: -

Trust: 0.8

vendor:netcommmodel:wireless hspa 3g10wve-l101-s306etsscope:neversion: -

Trust: 0.3

sources: CNVD: CNVD-2017-02427 // BID: 96384 // JVNDB: JVNDB-2016-008865 // CNNVD: CNNVD-201702-811 // NVD: CVE-2016-6024

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2016-6024
value: MEDIUM

Trust: 1.0

NVD: CVE-2016-6024
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2017-02427
value: HIGH

Trust: 0.6

CNNVD: CNNVD-201702-811
value: MEDIUM

Trust: 0.6

nvd@nist.gov: CVE-2016-6024
severity: MEDIUM
baseScore: 4.0
vectorString: AV:N/AC:L/AU:S/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 8.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2017-02427
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2016-6024
baseSeverity: MEDIUM
baseScore: 4.3
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 2.8
impactScore: 1.4
version: 3.0

Trust: 1.8

sources: CNVD: CNVD-2017-02427 // JVNDB: JVNDB-2016-008865 // CNNVD: CNNVD-201702-811 // NVD: CVE-2016-6024

PROBLEMTYPE DATA

problemtype:CWE-200

Trust: 1.8

sources: JVNDB: JVNDB-2016-008865 // NVD: CVE-2016-6024

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201702-811

TYPE

information disclosure

Trust: 0.6

sources: CNNVD: CNNVD-201702-811

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2016-008865

PATCH
title:2010512url:http://www-01.ibm.com/support/docview.wss?uid=swg22010512
Trust: 0.8
title:Patch for NetCommWirelessWirelessRouter Remote Command Injection Vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/90004
Trust: 0.6
title:NetCommWireless Wireless Router Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=68098
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2017-02427 // 
            
            
            
            JVNDB: JVNDB-2016-008865 // 
            
            
            
            CNNVD: CNNVD-201702-811

EXTERNAL IDS
db:NVDid:CVE-2016-6024
Trust: 3.3
db:BIDid:96384
Trust: 1.5
db:JVNDBid:JVNDB-2016-008865
Trust: 0.8
db:CNVDid:CNVD-2017-02427
Trust: 0.6
db:CNNVDid:CNNVD-201702-811
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2017-02427 // 
            
            
            
            BID: 96384 // 
            
            
            
            JVNDB: JVNDB-2016-008865 // 
            
            
            
            CNNVD: CNNVD-201702-811 // 
            
            
            
            NVD: CVE-2016-6024

REFERENCES
url:http://www.ibm.com/support/docview.wss?uid=swg22010512
Trust: 1.6
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/116868
Trust: 1.6
url:http://www.securityfocus.com/bid/96384
Trust: 1.2
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-6024
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2016-6024
Trust: 0.8
url:http://www.netcommwireless.com/
Trust: 0.3
url:http://seclists.org/fulldisclosure/2016/may/18
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2017-02427 // 
            
            
            
            BID: 96384 // 
            
            
            
            JVNDB: JVNDB-2016-008865 // 
            
            
            
            CNNVD: CNNVD-201702-811 // 
            
            
            
            NVD: CVE-2016-6024

CREDITS
Bhadresh Patel.
Trust: 0.9
sources:
            
            
            BID: 96384 // 
            
            
            
            CNNVD: CNNVD-201702-811

SOURCES
db:CNVDid:CNVD-2017-02427
db:BIDid:96384
db:JVNDBid:JVNDB-2016-008865
db:CNNVDid:CNNVD-201702-811
db:NVDid:CVE-2016-6024

LAST UPDATE DATE
2024-11-23T22:00:50.106000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2017-02427date:2017-03-06T00:00:00
db:BIDid:96384date:2017-03-07T01:06:00
db:JVNDBid:JVNDB-2016-008865date:2017-12-26T00:00:00
db:CNNVDid:CNNVD-201702-811date:2017-11-28T00:00:00
db:NVDid:CVE-2016-6024date:2024-11-21T02:55:21.200

SOURCES RELEASE DATE
db:CNVDid:CNVD-2017-02427date:2017-03-06T00:00:00
db:BIDid:96384date:2017-02-09T00:00:00
db:JVNDBid:JVNDB-2016-008865date:2017-12-26T00:00:00
db:CNNVDid:CNNVD-201702-811date:2017-02-23T00:00:00
db:NVDid:CVE-2016-6024date:2017-11-27T21:29:00.220