PT-2019-9656

CVE-2018-18877

·

Published

2019-06-18

·

Updated

2019-06-18

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Columbia Weather MicroServer version MS 2.6.9900
Description The issue allows an authenticated web user to access an alternative configuration page, specifically the config main.php page, which enables manipulation of the device.
Recommendations For version MS 2.6.9900, restrict access to the config main.php page to prevent unauthorized device manipulation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-287: Improper Authentication
Related identifiers
CVE-2018-18877
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com