PT-2016-3840 · Westermo · Weos

Neil Smith · Publicado 2016-01-30 · Atualizado 2016-03-07 · CVE-2015-7923

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Westermo WeOS versions prior to 4.19.0

Description The issue allows man-in-the-middle attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key, as the same SSL private key is used across different customers' installations.

Recommendations For versions prior to 4.19.0, update to version 4.19.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2015-7923

Produtos afetados

Weos

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-7923 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-16-028-01 · Nota