PT-2017-16353 · Phoenix Contact · Mguard

Publicado 2017-02-13 · Atualizado 2021-08-31 · CVE-2017-5159

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Phoenix Contact mGuard version 8.4.0

Description An issue was discovered where updating an mGuard device to version 8.4.0 via the update-upload facility resets the password of the admin user to its default value.

Recommendations For version 8.4.0, after updating, immediately change the admin user password from its default value to a secure password to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-99

Identificadores relacionados

CVE-2017-5159

Produtos afetados

Mguard

Referências · 4

• https://osv.dev/vulnerability/CVE-2017-5159 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-5159 · Nota de Segurança
• http://securityfocus.com/bid/95648 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-17-017-01 · Nota