PT-2020-19285
CVE-2020-6874
·
تاريخ النشر
2020-09-01
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
ZTE ZXIPTV version 5.09.08.04
ZTE ZXIPTV-WEB version 5.09.08.04
Description
The issue is related to cryptographic problems where the encryption algorithm is not used properly. This could allow remote attackers to perform account credential enumeration attacks or brute-force attacks for password guessing.
Recommendations
For ZTE ZXIPTV version 5.09.08.04, update the encryption algorithm to properly secure account credentials.
For ZTE ZXIPTV-WEB version 5.09.08.04, update the encryption algorithm to properly secure account credentials.
As a temporary workaround, consider restricting access to sensitive areas of the application to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾