PT-2016-1116 · Advantech · Eki-132X

Publicado 2016-01-09 · Atualizado 2016-01-18 · CVE-2015-7938

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Advantech EKI-132x devices with firmware before 2015-12-31

Description The issue is related to weaknesses in the authentication procedure of the EKI series 1321 and 1322 industrial Ethernet switches. This allows remote attackers to bypass authentication via unspecified vectors.

Recommendations For Advantech EKI-132x devices with firmware before 2015-12-31, update the firmware to a version released after 2015-12-31 to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

BDU:2016-00361

CVE-2015-7938

Produtos afetados

Eki-132X

Referências · 3

• https://bdu.fstec.ru/vul/2016-00361 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-15-344-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-7938 · Nota de Segurança