PT-2017-17410 · Unknown · Usb Pratirodh

Sachin Wagh + 1 · Publicado 2017-03-23 · Atualizado 2019-10-03 · CVE-2017-6911

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions USB Pratirodh (affected versions not specified)

Description The issue concerns the disclosure of sensitive information. Specifically, it stores sensitive data such as username and password in a simple usb.xml file. An attacker with physical access to the system can modify this file to suit their needs, potentially aiding in further attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insecure Storage of Sensitive Information

Enumeração de Fraquezas

CWE-922

Identificadores relacionados

CVE-2017-6911

Produtos afetados

Usb Pratirodh

Referências · 5

• http://seclists.org/fulldisclosure/2017/Mar/43 · Nota
• http://securityfocus.com/bid/96970 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-6911 · Nota de Segurança
• http://packetstormsecurity.com/files/141651/USB-Pratirodh-Insecure-Password-Storage.html · Nota
• http://securityfocus.com/archive/1/540289/100/0/threaded · Nota