PT-2018-16850
CVE-2018-5267
·
Publicado
2018-01-08
·
Atualizado
2019-10-03
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Cobham Sea Tel 121 build 222701
Description
The issue allows remote attackers to bypass authentication by making a direct request to specific HTML pages, including "MenuDealerGx.html", "MenuDealer.html", "MenuEuNCGx.html", "MenuEuNC.html", "MenuSysGx.html", or "MenuSys.html".
Recommendations
For Cobham Sea Tel 121 build 222701, as a temporary workaround, consider restricting access to the mentioned HTML pages until a patch is available.
Explorabilidade
Exploit
Correção
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾