PT-2017-13191 · Loytec · Lvis-3Me

Publicado 2017-10-05 · Atualizado 2019-10-09 · CVE-2017-13998

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LOYTEC LVIS-3ME versions prior to 6.2.0

Description An issue with insufficient protection of credentials was found, where the application fails to adequately safeguard sensitive information from unauthorized access.

Recommendations For LOYTEC LVIS-3ME versions prior to 6.2.0, update to version 6.2.0 or later to resolve the issue.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2017-13998

Produtos afetados

Lvis-3Me

Referências · 4

• https://ics-cert.us-cert.gov/advisories/ICSA-17-257-01 · Nota
• https://osv.dev/vulnerability/CVE-2017-13998 · Aviso do Fabricante
• http://securityfocus.com/bid/100847 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-13998 · Nota de Segurança