PT-2023-20691 · Propius · Machineselector

CVE-2023-26511

·

Publicado

2023-03-14

·

Atualizado

2025-02-27

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Propius MachineSelector versions 6.6.0 through 6.6.1
Description A Hard Coded Admin Credentials issue in the Web-UI Admin Panel allows remote attackers to gain access to the admin panel Propiusadmin.php, which allows taking control of the affected system.
Recommendations For versions 6.6.0 and 6.6.1, consider disabling access to the Propiusadmin.php admin panel until a patch is available. Restrict access to the Web-UI Admin Panel to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-26511

Produtos afetados

Machineselector