PT-2018-17677
CVE-2018-6624
·
Publicado
2018-02-05
·
Atualizado
2019-10-03
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
OMRON NS devices versions 1.1 through 1.3
Description
The issue allows remote attackers to bypass authentication by making a direct request to the .html file for a specific screen. For example, this can be achieved by accessing the "monitor.html" file.
Recommendations
For OMRON NS devices versions 1.1 through 1.3, consider restricting direct access to .html files for specific screens, such as "monitor.html", until a patch is available.
Explorabilidade
Correção
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾