PT-2019-8011

CVE-2017-14852

·

Published

2019-06-03

·

Updated

2019-06-04

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Orpak SiteOmat (affected versions not specified)
Description An insecure communication was found between a user and the Orpak SiteOmat management console due to an invalid SSL certificate. This allows an eavesdropper to capture the communication and decrypt the data.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-311: Missing Encryption of Sensitive Data
CWE-310
Related identifiers
CVE-2017-14852
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com