PT-2012-4438 · Garrettcom · Garrettcom Magnum Mns-6K

Publicado 2012-09-04 · Atualizado 2012-09-04 · CVE-2012-3014

Positive Technologies (AI Summary)

CVSS v2.0

7.7

Alta

Vetor base

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GarrettCom Magnum MNS-6K versions prior to 4.4.0 GarrettCom Magnum MNS-6K versions 14.x prior to 14.4.0

Description The issue concerns a hardcoded password for an administrative account in the Management Software application. This hardcoded password allows local users to gain privileges, potentially leading to unauthorized access and control.

Recommendations For versions prior to 4.4.0, update to version 4.4.0 or later. For versions 14.x prior to 14.4.0, update to version 14.4.0 or later.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2012-3014

Produtos afetados

Garrettcom Magnum Mns-6K

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-3014 · Nota de Segurança
• http://garrettcom.com/techsupport/6k_dl/6k440_rn.pdf · Aviso do Fabricante
• http://us-cert.gov/control_systems/pdf/ICSA-12-243-01.pdf · Nota