PT-2017-9638

CVE-2016-8361

·

Published

2017-02-13

·

Updated

2017-02-17

Description by

CVSS 3.1
8.6
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
Name of the Vulnerable Software and Affected Versions Lynxspring JENEsys BAS Bridge versions 1.1.8 and older
Description An issue was discovered in the application where it uses a hard-coded username with no password, allowing an attacker to access the system without authentication.
Recommendations For versions 1.1.8 and older, consider changing the hard-coded username and implementing a secure password to prevent unauthorized access. As a temporary workaround, restrict access to the system to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾