{"id":"CVE-2017-5136","aliases":["EUVD-2017-14245","GHSA-f4wj-3824-vj6g"],"status":"published","title":"An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application...","description":"An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application failed to check the access control of the request which could result in an attacker being able to shutdown the system.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01791,"percentile":0.78524,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2017-02-05T18:00:00Z","modified":"2026-06-17T01:20:01Z","products":[{"vendor":"sendquick","product":"avera_sms_gateway_firmware"},{"vendor":"sendquick","product":"entera_sms_gateway_firmware"}],"references":[{"url":"https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/96031","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5136"},{"url":"https://niantech.io/blog/2017/02/05/vulns-multiple-vulns-in-sendquick-entera-avera-sms-gateway-appliances"},{"url":"https://github.com/advisories/GHSA-f4wj-3824-vj6g"}],"sources":{"cve":[{"id":"CVE-2017-5136","description":"An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application failed to check the access control of the request which could result in an attacker being able to shutdown the system.","status":"published","published":"2017-02-05T18:00:00Z","modified":"2024-08-05T14:55:35.178Z","updated_at":"2026-11-02T14:33:12.942409Z"}],"euvd":[{"id":"EUVD-2017-14245","description":"An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application failed to check the access control of the request which could result in an attacker being able to shutdown the system.","status":"published","published":"2017-02-05T18:00:00Z","modified":"2024-08-05T14:55:35Z","updated_at":"2026-11-03T02:39:16.959487Z"}],"ghsa":[{"id":"GHSA-f4wj-3824-vj6g","title":"An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application...","description":"An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application failed to check the access control of the request which could result in an attacker being able to shutdown the system.","status":"published","published":"2022-05-13T01:46:01Z","modified":"2025-04-20T03:33:27Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T15:01:40.757238Z"}],"nvd":[{"id":"CVE-2017-5136","description":"An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application failed to check the access control of the request which could result in an attacker being able to shutdown the system.","status":"published","published":"2017-02-05T18:59:00.197Z","modified":"2026-06-17T01:20:01.747Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:03:42.372487Z"}]}}