PT-2019-10021
CVE-2018-20220
·
تاريخ النشر
2019-03-17
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Teracue ENC-400 devices with firmware 2.56 and below
Description:
An issue was discovered where a large portion of the HTTP endpoints are missing authentication, allowing an attacker to view these pages before being authenticated. Some of these pages may disclose sensitive information.
Recommendations:
For Teracue ENC-400 devices with firmware 2.56 and below, consider restricting access to the web interface until a fix is available. As a temporary workaround, limit access to sensitive information by implementing additional authentication measures for the affected HTTP endpoints.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾