PT-2019-8603

CVE-2017-7912

·

Published

2019-04-08

·

Updated

2019-10-09

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Hanwha Techwin SRN-4000 versions prior to SRN4000 v2.16 170401
Description A specially crafted http request and response could allow an attacker to gain access to the device management page with admin privileges without proper authentication.
Recommendations For versions prior to SRN4000 v2.16 170401, update the firmware to SRN4000 v2.16 170401 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-284: Improper Access Control
CWE-287: Improper Authentication
Related identifiers
CVE-2017-7912
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com