PT-2013-5168 · Digital Alert Systems+1 · Dasdec+1

Publicado 2013-06-29 · Atualizado 2013-07-01 · CVE-2013-4735

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Digital Alert Systems DASDEC EAS device versions prior to 2.0-2 Monroe Electronics R189 One-Net EAS device versions prior to 2.0-2

Description The issue allows remote attackers to obtain access via an IP network due to a default password for an administrative account.

Recommendations For Digital Alert Systems DASDEC EAS device versions prior to 2.0-2, update to version 2.0-2 or later to resolve the issue. For Monroe Electronics R189 One-Net EAS device versions prior to 2.0-2, update to version 2.0-2 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-4735

Produtos afetados

Dasdec

R189 One-Net

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2013-4735 · Nota de Segurança
• http://digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdf · Aviso do Fabricante
• http://monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdf · Aviso do Fabricante
• http://kb.cert.org/vuls/id/AAMN-98MU7H · Nota
• http://kb.cert.org/vuls/id/AAMN-98MUK2 · Nota
• http://kb.cert.org/vuls/id/662676 · Nota