PT-2014-8560
CVE-2014-8496
·
Publicado
2014-12-10
·
Atualizado
2014-12-10
Descrição por
CVSS 2.0
10
AltaMétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Digicom DG-5514T ADSL router version 3.2
Description
The issue allows remote attackers to gain administrator privileges via a brute force session hijacking attack due to the generation of predictable session IDs.
Recommendations
For Digicom DG-5514T ADSL router version 3.2, consider updating the firmware to a version that does not generate predictable session IDs as a permanent solution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾