PT-2010-4045 · Linear · Linear Emerge

Publicado 2010-06-25 · Atualizado 2010-06-28 · CVE-2010-2469

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linear eMerge versions 50 and 5000

Description The issue allows remote attackers to obtain Video Recorder data by establishing a session to the device, due to the use of a default password for the IEIeMerge account.

Recommendations For Linear eMerge versions 50 and 5000, change the default password of the IEIeMerge account to a strong and unique password to prevent unauthorized access.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2010-2469

Produtos afetados

Linear Emerge

Referências · 5

• 🔥 http://blip.tv/file/3414004 · Exploit
• 🔥 http://slideshare.net/shawn_merdinger/we-dont-need-no-stinkin-badges-hacking-electronic-door-access-controllersquot-shawn-merdinger-carolinacon · Exploit
• http://darkreading.com/blog/archives/2010/04/attacking_door.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2469 · Nota de Segurança
• http://securityinfowatch.com/Executives+Columns+%2526+Features/1316527?pageNum=2 · Nota