PT-2018-12884
CVE-2018-15124
·
Publicado
2018-08-13
·
Atualizado
2018-10-10
Descrição por
CVSS 3.1
10
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118
Description
The issue concerns a weak hashing algorithm that allows an unauthenticated attacker to extract clear text passwords and gain root access on the device.
Recommendations
For Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118, consider changing passwords and restricting device access until a fix is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾