PT-2019-2337 · Bmx · Bmxnor0200H
CVE-2019-6812
·
Publicado
2019-05-14
·
Atualizado
2022-10-14
CVSS v3.1
7.2
Alta
| Vetor | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
BMX-NOR-0200H versions prior to V1.7 IR 19
Description
A use of hardcoded credentials issue exists, which could cause a confidentiality issue when using the FTP protocol. This allows a remote attacker to gain access to the FTP service.
Recommendations
For versions prior to V1.7 IR 19, update to V1.7 IR 19 or later to resolve the issue. As a temporary workaround, consider restricting access to the FTP service until the update is applied. Avoid using the FTP protocol with the affected firmware versions until the issue is resolved.
Correção
Using Hardcoded Credentials
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Bmxnor0200H