PT-2017-7853
CVE-2016-10314
·
تاريخ النشر
2017-04-03
·
تاريخ التحديث
2017-04-10
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3)
Jensen of Scandinavia AS Air:Link 5000AC (AL5000AC) version 1.13
Jensen of Scandinavia AS Air:Link 59300 (AL59300) version 1.04 (Rev. 4)
Description
The issue allows remote attackers to read passwords by making a direct request to the "x.asp" page.
Recommendations
For Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), consider restricting access to the x.asp page until a fix is available.
For Jensen of Scandinavia AS Air:Link 5000AC (AL5000AC) version 1.13, avoid using the x.asp page for password storage or transmission until the issue is resolved.
For Jensen of Scandinavia AS Air:Link 59300 (AL59300) version 1.04 (Rev. 4), as a temporary workaround, consider disabling direct requests to the x.asp page to prevent password exposure.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾