PT-2019-10789
CVE-2018-4062
·
تاريخ النشر
2019-05-06
·
تاريخ التحديث
2019-05-08
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Sierra Wireless AirLink ES450 FW version 4.9.3
Description
A hard-coded credentials issue exists in the snmpd function. Activating snmpd outside of the WebUI can cause the activation of the hard-coded credentials, resulting in the exposure of a privileged user. An attacker can activate snmpd without any configuration changes to trigger this issue.
Recommendations
For Sierra Wireless AirLink ES450 FW version 4.9.3, consider disabling the snmpd function until a fix is available to prevent the exposure of hard-coded credentials.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾