PT-2015-7120 · Qolsys · Qolsys Iq Panel

Roman Faynberg · Publicado 2015-10-31 · Atualizado 2015-11-02 · CVE-2015-6032

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qolsys IQ Panel versions prior to 1.5.1

Description The issue concerns hardcoded cryptographic keys, which can be leveraged by remote attackers to create digital signatures for code. This is possible if an attacker has knowledge of a key from a different installation.

Recommendations For versions prior to 1.5.1, update to version 1.5.1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2015-6032

Produtos afetados

Qolsys Iq Panel

Referências · 2

• http://kb.cert.org/vuls/id/573848 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-6032 · Nota de Segurança