PT-2016-1224 · Sauter · Moduweb Vision

John Stock + 1 · Publicado 2016-02-06 · Atualizado 2016-12-03 · CVE-2015-7914

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sauter moduWeb Vision versions prior to 1.6.0

Description The issue is related to errors in security settings, allowing remote attackers to bypass authentication by leveraging knowledge of a password hash without knowing the associated password.

Recommendations For versions prior to 1.6.0, update to version 1.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the moduWeb Vision interface until the update is applied.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-254

CWE-287

Identificadores relacionados

BDU:2016-00485

CVE-2015-7914

Produtos afetados

Moduweb Vision

Referências · 4

• http://seclists.org/fulldisclosure/2016/Feb/25 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-16-033-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-7914 · Nota de Segurança
• https://bdu.fstec.ru/vul/2016-00485 · Nota de Segurança