PT-2014-8928 · Entrypass · Entrypass N5200 Active Network Control Panel

Publicado 2014-12-07 · Atualizado 2018-10-09 · CVE-2014-9303

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions EntryPass N5200 Active Network Control Panel (affected versions not specified)

Description The issue allows remote attackers to read device memory and obtain the administrator username and password via a URL starting with an ASCII character o through z or A through D.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-9303

Produtos afetados

Entrypass N5200 Active Network Control Panel

Referências · 5

• 🔥 https://redteam-pentesting.de/advisories/rt-sa-2014-011 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2014/Dec/2 · Exploit
• 🔥 https://exploit-db.com/exploits/35442 · Exploit
• http://securityfocus.com/archive/1/534128/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-9303 · Nota de Segurança