{"id":"CVE-2018-0676","aliases":["EUVD-2018-1486","GHSA-gfjg-c4fv-56hq"],"status":"published","title":"BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to...","description":"BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to bypass authentication to access to the management screen and execute an arbitrary command via unspecified vectors.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00617,"percentile":0.49799,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2019-01-09T22:00:00Z","modified":"2026-06-17T01:31:25Z","products":[{"vendor":"panasonic","product":"bn-sdwbp3_firmware"},{"vendor":"panasonic corporation","product":"bn-sdwbp3"}],"references":[{"url":"https://jvn.jp/en/jp/JVN65082538/index.html","tags":["third-party-advisory","x_refsource_JVN","x_transferred","Third Party Advisory"]},{"url":"https://p3.support.panasonic.com/faq/show/5017?\u0026site_domain=p3","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0676"},{"url":"https://github.com/advisories/GHSA-gfjg-c4fv-56hq"}],"sources":{"cve":[{"id":"CVE-2018-0676","description":"BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to bypass authentication to access to the management screen and execute an arbitrary command via unspecified vectors.","status":"published","published":"2019-01-09T22:00:00Z","modified":"2024-08-05T03:35:48.852Z","updated_at":"2026-11-02T14:35:12.160284Z"}],"euvd":[{"id":"EUVD-2018-1486","description":"BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to bypass authentication to access to the management screen and execute an arbitrary command via unspecified vectors.","status":"published","published":"2019-01-09T22:00:00Z","modified":"2024-08-05T03:35:48Z","updated_at":"2026-11-03T02:40:17.893536Z"}],"ghsa":[{"id":"GHSA-gfjg-c4fv-56hq","title":"BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to...","description":"BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to bypass authentication to access to the management screen and execute an arbitrary command via unspecified vectors.","status":"published","published":"2022-05-14T01:35:21Z","modified":"2023-02-02T05:04:19Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:51:50.619018Z"}],"nvd":[{"id":"CVE-2018-0676","description":"BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to bypass authentication to access to the management screen and execute an arbitrary command via unspecified vectors.","status":"published","published":"2019-01-09T23:29:01.793Z","modified":"2026-06-17T01:31:25.943Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:04:52.056758Z"}]}}