PT-2019-3610 · Zingbox · Zingbox Inspector
CVE-2019-15022
·
Publicado
2019-10-01
·
Atualizado
2023-02-15
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
Zingbox Inspector versions 1.294 and earlier
Description
A security issue exists due to the lack of protection against ARP spoofing, allowing a remote attacker to potentially elevate their privileges. The issue makes the Inspector susceptible to ARP spoofing.
Recommendations
For Zingbox Inspector versions 1.294 and earlier, update to a version later than 1.294 to resolve the issue. As a temporary workaround, consider implementing network segmentation and strict access controls to minimize the risk of exploitation. Restrict access to the network to prevent remote attackers from exploiting the ARP spoofing vulnerability.
Correção
Authentication Bypass by Spoofing
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Zingbox Inspector