PT-2021-11616
CVE-2020-28973
·
تاريخ النشر
2021-04-20
·
تاريخ التحديث
2021-04-27
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
ABUS Secvest wireless alarm system version 3.01.17
Description:
The issue allows unauthorized access to sensitive information, including usernames and passwords, due to improper authentication of requests to the built-in HTTPS interface. This sensitive information can be used to reconfigure or disable the alarm system.
Recommendations:
For version 3.01.17, consider restricting access to the HTTPS interface until a patch is available. As a temporary workaround, limit the exposure of the alarm system to the internet to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾