PT-2018-1516
CVE-2018-10729
·
تاريخ النشر
2018-02-22
·
تاريخ التحديث
2018-06-20
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Phoenix Contact FL SWITCH versions 1.0 through 1.33
Description
The issue is related to insufficient security mechanisms in the CGI applications of the firmware, allowing a remote attacker to access the contents of configuration files. An unauthenticated user can read the configuration file.
Recommendations
For versions 1.0 through 1.33, restrict access to the configuration file to prevent unauthorized reading until a patch is available. Consider implementing additional security measures to protect the configuration files from unauthorized access.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾