PT-2016-1116

CVE-2015-7938

·

Published

2016-01-09

·

Updated

2016-01-18

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Advantech EKI-132x devices with firmware before 2015-12-31
Description The issue is related to weaknesses in the authentication procedure of the EKI series 1321 and 1322 industrial Ethernet switches. This allows remote attackers to bypass authentication via unspecified vectors.
Recommendations For Advantech EKI-132x devices with firmware before 2015-12-31, update the firmware to a version released after 2015-12-31 to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-287: Improper Authentication
Related identifiers
CVE-2015-7938
BDU:2016-00361
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com