PT-2020-15887
CVE-2020-25011
·
تاريخ النشر
2020-12-17
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Kyland KPS2204 6 Port Managed Din-Rail Programmable Serial Device Servers version R0002.P05
Description
A sensitive information disclosure issue allows remote attackers to obtain
username and password by requesting the "/cgi-bin/webadminget.cgi" API endpoint via a browser.Recommendations
For version R0002.P05, consider restricting access to the "/cgi-bin/webadminget.cgi" API endpoint to minimize the risk of exploitation. Avoid using this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾