PT-2017-13196
CVE-2017-14005
·
تاريخ النشر
2017-10-17
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
ProMinent MultiFLEX M10a Controller (affected versions not specified)
Description
A security issue was found in the ProMinent MultiFLEX M10a Controller web interface, where it is possible to change a user's password without knowing the original password. This could allow an authenticated attacker to change a user's password, enabling future access and possible configuration changes.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾