PT-2021-16841

CVE-2021-25910

·

Published

2021-01-29

·

Updated

2021-02-05

Description by

CVSS 3.1
8.0
High
MetricsAV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ZIV AUTOMATION 4CCT-EA6-334126BF (affected versions not specified)
Description The issue concerns an Improper Authentication vulnerability in the cookie parameter, allowing a local attacker to modify several parameters of the affected device as an authenticated user.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-287: Improper Authentication
Related identifiers
CVE-2021-25910
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com