PT-2018-17677
CVE-2018-6624
·
تاريخ النشر
2018-02-05
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
OMRON NS devices versions 1.1 through 1.3
Description
The issue allows remote attackers to bypass authentication by making a direct request to the .html file for a specific screen. For example, this can be achieved by accessing the "monitor.html" file.
Recommendations
For OMRON NS devices versions 1.1 through 1.3, consider restricting direct access to .html files for specific screens, such as "monitor.html", until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾