[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1pBWNtbgmP9KzU9aKFX_mT2lMblg_aZ0O292rCyTHN0":3,"g5a-risk:CVE-2017-7649":111},{"success":4,"data":5,"meta":109},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":15,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":46,"references":47,"referencesCount":61,"weaknesses":62,"weaknessesCount":46,"isActivelyExploited":71,"cisaInfo":15,"otxData":15,"relatedBlogPosts":72,"seoMetadata":73,"configurations":98,"relatedVendorCves":107,"notableEvents":108},"CVE-2017-7649","What is CVE-2017-7649?","The network enabled distribution of Kura before 2.1.0 takes control over the device's firewall setup but does not allow IPv6 firewall rules to be configured. Still the Equinox console port 5002 is left open, allowing to log into Kura without any user credentials over unencrypted telnet and executing commands using the Equinox \"exec\" command. As the process is running as \"root\" full control over the device can be acquired. IPv6 is also left in auto-configuration mode, accepting router advertisements automatically and assigns a MAC address based IPv6 address.","The network enabled distribution of Kura before 2.1.0 takes control over the device's firewall setup but does not allow IPv6 firewall rules to be configured....","2017-09-11T16:29:00.213","2025-04-20T01:37:25.86",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":36,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",10,0.01647,[37,37,37,37,37,37,37],"Critical",[41],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"eclipse","kura","*","cpe:2.3:a:eclipse:kura:*:*:*:*:*:*:*:*",1,[48,53,57,59],{"url":49,"source":50,"tags":51},"https:\u002F\u002Fbugs.eclipse.org\u002Fbugs\u002Fshow_bug.cgi?id=514681","Eclipse",[52],"Third Party Advisory",{"url":54,"source":55,"tags":56},"https:\u002F\u002Fgithub.com\u002Feclipse\u002Fkura\u002Fissues\u002F956","GitHub",[52],{"url":49,"source":50,"tags":58},[52],{"url":54,"source":55,"tags":60},[52],4,[63],{"id":64,"name":65,"description":66,"extendedDescription":67,"status":68,"abstraction":69,"structure":70},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":74,"metaDescription":75,"keywords":76,"canonicalUrl":77,"structuredData":78},"What is CVE-2017-7649? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-7649, a critical severity cyber security vulnerability from 2017. The network enabled distribution of Kura before 2.1.0 ta...","CVE-2017-7649, CVE-2017-7649 vulnerability, CVE-2017-7649 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, eclipse security, kura vulnerability","\u002Fwhat-is\u002Fcve-2017-7649",{"@context":79,"@type":80,"headline":74,"description":75,"datePublished":10,"dateModified":11,"author":81,"publisher":85,"about":89,"mainEntityOfPage":93,"articleSection":96,"keywords":97},"https:\u002F\u002Fschema.org","TechArticle",{"@type":82,"name":83,"url":84},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":82,"name":83,"url":84,"logo":86},{"@type":87,"url":88},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":90,"name":6,"description":91,"additionalType":92},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":94,"@id":95},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-7649","Cybersecurity","CVE-2017-7649, CVE-2017-7649 vulnerability, CVE-2017-7649 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[99],{"Operator":15,"Negate":15,"Nodes":100},[101],{"Operator":102,"Negate":15,"CPEMatch":103},"OR",[104],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":105,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":106},"D5CB27F8-741A-458B-94C3-C2657DB5D4B4","2.0.2",[],[],{"lastModified":11,"cacheTime":110,"version":33},1792275698887,{"score":112,"band":113,"action":114,"scoredAt":115},54,"Medium","Plan remediation","2026-10-17T09:11:40.681134+00:00"]