1. Home
  2. CVE Database
  3. CVE-2018-16499
MEDIUM · 5.9

CVE-2018-16499

In VOS compromised, an attacker at network endpoints can possibly view communications between an unsuspecting user and the service using man-in-the-middle attacks. Usage of unapproved SSH encryption p...

Vulnerability Description

In VOS compromised, an attacker at network endpoints can possibly view communications between an unsuspecting user and the service using man-in-the-middle attacks. Usage of unapproved SSH encryption protocols or cipher suites also violates the Data Protection TSR (Technical Security Requirements).

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Versa-NetworksVersa Operating System-

Related Weaknesses (CWE)

CWE-326

References

FAQ

What is CVE-2018-16499?

CVE-2018-16499 is a vulnerability with a CVSS score of 5.9 (MEDIUM). In VOS compromised, an attacker at network endpoints can possibly view communications between an unsuspecting user and the service using man-in-the-middle attacks. Usage of unapproved SSH encryption p...

How severe is CVE-2018-16499?

CVE-2018-16499 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-16499?

Check the references section above for vendor advisories and patch information. Affected products include: Versa-Networks Versa Operating System.