PT-2017-12661 · Moxa · Mrd-305-Din+3

Publicado 2017-08-25 · Atualizado 2019-10-09 · CVE-2017-12709

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MRD-305-DIN versions prior to 1.7.5.0 MRD-315 versions prior to 1.7.5.0 MRD-355 versions prior to 1.7.5.0 MRD-455 versions prior to 1.7.5.0

Description A Use of Hard-Coded Credentials issue was discovered, which could allow for unauthorized local low-privileged access to the device. The device utilizes hard-coded credentials.

Recommendations For MRD-305-DIN versions prior to 1.7.5.0, update to version 1.7.5.0 or later. For MRD-315 versions prior to 1.7.5.0, update to version 1.7.5.0 or later. For MRD-355 versions prior to 1.7.5.0, update to version 1.7.5.0 or later. For MRD-455 versions prior to 1.7.5.0, update to version 1.7.5.0 or later.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2017-12709

Produtos afetados

Mrd-305-Din

Mrd-315

Mrd-355

Mrd-455

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-12709 · Nota de Segurança
• http://securityfocus.com/bid/100470 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01 · Nota