PT-2016-5096 · Accuenergy · Accuenergy Acuvim Ii Net

Maxim Rupp · Publicado 2016-04-21 · Atualizado 2016-04-28 · CVE-2016-2293

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Accuenergy Acuvim II NET Firmware versions 3.08 Accuenergy Acuvim IIR NET Firmware versions 3.08

Description The issue allows remote attackers to discover settings via a direct request to an unspecified URL. This could potentially expose sensitive information.

Recommendations For Accuenergy Acuvim II NET Firmware version 3.08, update to a newer version that addresses this issue. For Accuenergy Acuvim IIR NET Firmware version 3.08, update to a newer version that addresses this issue. As a temporary workaround, consider restricting access to the affected module to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-2293

Produtos afetados

Accuenergy Acuvim Ii Net

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-2293 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-2293 · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-16-105-02 · Nota