PT-2019-9253
CVE-2018-16187
·
تاريخ النشر
2019-01-09
·
تاريخ التحديث
2019-02-08
الوصف من
CVSS 3.1
5.9
متوسطةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
RICOH Interactive Whiteboard D2200 versions 1.3 through 2.2
RICOH Interactive Whiteboard D5500 versions 1.3 through 2.2
RICOH Interactive Whiteboard D5510 versions 1.3 through 2.2
RICOH Interactive Whiteboard Controller Type1 versions 1.3 through 2.2
RICOH Interactive Whiteboard Controller Type2 versions 3.0 through 3.1.10137.0
Description
The issue allows man-in-the-middle attackers to eavesdrop on encrypted communication due to the lack of server certificate verification.
Recommendations
For RICOH Interactive Whiteboard D2200 versions 1.3 through 2.2, update the software to verify server certificates.
For RICOH Interactive Whiteboard D5500 versions 1.3 through 2.2, update the software to verify server certificates.
For RICOH Interactive Whiteboard D5510 versions 1.3 through 2.2, update the software to verify server certificates.
For RICOH Interactive Whiteboard Controller Type1 versions 1.3 through 2.2, update the controller to verify server certificates.
For RICOH Interactive Whiteboard Controller Type2 versions 3.0 through 3.1.10137.0, update the controller to verify server certificates.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾