PT-2013-2123 · Digital Alert Systems+1 · Dasdec+1

Cesar Cerrudo + 1 · Publicado 2013-06-29 · Atualizado 2020-01-29 · CVE-2013-0137

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Digital Alert Systems DASDEC EAS device versions prior to 2.0-2 Monroe Electronics R189 One-Net EAS device versions prior to 2.0-2

Description The default configuration of the affected devices contains a known SSH private key, allowing remote attackers to obtain root access and spoof alerts via an SSH session.

Recommendations For Digital Alert Systems DASDEC EAS device versions prior to 2.0-2, update to version 2.0-2 or later to resolve the issue. For Monroe Electronics R189 One-Net EAS device versions prior to 2.0-2, update to version 2.0-2 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2013-0137

Produtos afetados

Dasdec

R189 One-Net

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2013-0137 · Nota de Segurança
• http://digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdf · Aviso do Fabricante
• https://securityledger.com/2020/01/seven-years-later-scores-of-eas-systems-sit-un-patched-vulnerable · Nota
• http://monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdf · Aviso do Fabricante
• http://kb.cert.org/vuls/id/AAMN-98MU7H · Nota
• http://kb.cert.org/vuls/id/AAMN-98MUK2 · Nota
• http://kb.cert.org/vuls/id/662676 · Nota