PT-2016-5112 · Irz · Irz Ruh2

Publicado 2016-05-30 · Atualizado 2017-01-10 · CVE-2016-2309

Positive Technologies (AI Summary)

CVSS v2.0

8.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions iRZ RUH2 version before 2b

Description The issue allows remote authenticated users to modify data or cause a denial of service via unspecified vectors due to a lack of validation of firmware patches.

Recommendations For iRZ RUH2 version before 2b, update to version 2b or later to resolve the issue.

Correção

Insufficient Verification of Data Authenticity

Enumeração de Fraquezas

CWE-345

Identificadores relacionados

CVE-2016-2309

Produtos afetados

Irz Ruh2

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-2309 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-2309 · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-16-138-01 · Nota