PT-2020-17068
CVE-2020-28946
·
تاريخ النشر
2020-12-08
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Plum IK-401 devices with firmware before 1.02
Description
The issue is related to an improper webserver configuration, allowing an attacker with network access to the device to obtain the configuration file, including hashed credential data, with a single unauthenticated GET request.
Recommendations
For Plum IK-401 devices with firmware before 1.02, update the firmware to version 1.02 or later to resolve the issue. As a temporary workaround, consider restricting network access to the device to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾