PT-2018-11742

CVE-2018-13319

·

Published

2018-11-26

·

Updated

2018-12-31

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Buffalo TS5600D1206 version 3.61-0.10
Description The issue allows attackers to determine sensitive device information via an unauthenticated POST request due to incorrect access control in the get portal info function.
Recommendations For Buffalo TS5600D1206 version 3.61-0.10, consider restricting access to the get portal info function until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Related identifiers
CVE-2018-13319
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com