CVE-2018-5385

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Navarino Infinity is prone to session fixation attacks. The server accepts the session ID as a GET parameter which can lead to bypassing the two factor authentication in some installations. This could lead to phishing attacks that can bypass the two factor authentication that is present in some installations.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-384

Affected software

Vendor	Product	Versions
Navarino	Infinity	>= 2.2, < 2.2

References

http://www.securityfocus.com/bid/103544Third Party Advisory, VDB Entry
https://medium.com/%40evstykas/pwning-ships-vsat-for-fun-and-profit-ba0fe9f42fb3
https://packetstormsecurity.com/files/146506/Navarino-Infinity-Blind-SQL-Injection-Session-Fixation.htmlExploit, Third Party Advisory, VDB Entry
https://www.kb.cert.org/vuls/id/184077Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/103544Third Party Advisory, VDB Entry
https://medium.com/%40evstykas/pwning-ships-vsat-for-fun-and-profit-ba0fe9f42fb3
https://packetstormsecurity.com/files/146506/Navarino-Infinity-Blind-SQL-Injection-Session-Fixation.htmlExploit, Third Party Advisory, VDB Entry
https://www.kb.cert.org/vuls/id/184077Third Party Advisory, US Government Resource

Timeline

Published: Jul 24, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-53867.5Some Navarino Infinity functions, up to version 2.2, placed in the URL can bypass any authentication mechanism leading to an information lea CVE-2018-53877.5Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be a CVE-2018-53886.5In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exha CVE-2018-53895.9The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks. Reusing a key pair across different versi CVE-2018-53907.5Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incomi CVE-2018-53917.5The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragm CVE-2018-53927.5mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation CVE-2018-53939.8The TP-LINK EAP Controller is TP-LINK's software for remotely controlling wireless access point devices. It utilizes a Java remote method in CVE-2018-53999.8The Auto-Maskin DCU 210E firmware contains an undocumented Dropbear SSH server, v2015.55, configured to listen on Port 22 while the DCU is r CVE-2018-54009.1The Auto-Maskin products utilize an undocumented custom protocol to set up Modbus communications with other devices without validating those CVE-2018-54015.9The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App transmit sensitive or security-critical data in cleartext in a commun CVE-2018-54028.8The Auto-Maskin DCU 210E, RP-210E, and Marine Pro Observer Android App use an embedded webserver that uses unencrypted plaintext for the tra