PT-2012-3176 · Utc Fire & Security · Ge-Mc100-Ntp/Gps-Zb Master Clock

Temple Murphy · Publicado 2012-02-23 · Atualizado 2012-02-27 · CVE-2012-1288

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device (affected versions not specified)

Description The issue concerns the use of hardcoded credentials for an administrative account in the device, making it easier for remote attackers to gain access through an HTTP session.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2012-1288

Produtos afetados

Ge-Mc100-Ntp/Gps-Zb Master Clock

Referências · 2

• http://kb.cert.org/vuls/id/707254 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1288 · Nota de Segurança