PT-2017-13186 · Loytec · Lvis-3Me

Publicado 2017-10-05 · Atualizado 2019-10-09 · CVE-2017-13992

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LOYTEC LVIS-3ME versions prior to 6.2.0

Description An issue was discovered where the application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution.

Recommendations For versions prior to 6.2.0, update to version 6.2.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-331

Identificadores relacionados

CVE-2017-13992

Produtos afetados

Lvis-3Me

Referências · 4

• https://osv.dev/vulnerability/CVE-2017-13992 · Aviso do Fabricante
• http://securityfocus.com/bid/100847 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-13992 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01 · Nota