PT-2019-3538 · Zingbox · Zingbox Inspector
CVE-2019-15015
·
Publicado
2019-10-01
·
Atualizado
2023-02-04
CVSS v3.1
8.4
Alta
| Vetor | AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
ZingBox Inspector versions 1.294 and earlier
Description
The issue is related to the use of hardcoded credentials in the ZingBox Inspector, which can allow a remote attacker to gain unauthorized access to the system. The presence of these credentials for root and inspector user accounts in the system software poses a risk.
Recommendations
For ZingBox Inspector versions 1.294 and earlier, consider changing the hardcoded credentials for root and inspector user accounts to unique, secure credentials as a temporary mitigation measure.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Using Hardcoded Credentials
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Zingbox Inspector