PT-2017-3117

CVE-2016-5791

·

Publicado

2017-10-12

·

Atualizado

2017-11-03

Descrição por

CVSS 2.0
10
Alta
MétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions JanTek JTC-200, all versions
Description An issue with improper authentication was found, allowing access to an undocumented BusyBox Linux shell over the TELNET service without authentication. This could enable a remote attacker to bypass authentication procedures and gain access to the shell.
Recommendations For all versions, consider disabling the TELNET service as a temporary workaround until a patch is available. Restrict access to the BusyBox Linux shell to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾