PT-2018-17677 · Omron · Omron Ns

Capitan Alfalo · Publicado 2018-02-05 · Atualizado 2019-10-03 · CVE-2018-6624

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OMRON NS devices versions 1.1 through 1.3

Description The issue allows remote attackers to bypass authentication by making a direct request to the .html file for a specific screen. For example, this can be achieved by accessing the "monitor.html" file.

Recommendations For OMRON NS devices versions 1.1 through 1.3, consider restricting direct access to .html files for specific screens, such as "monitor.html", until a patch is available.

Correção

Enumeração de Fraquezas

CWE-425

Identificadores relacionados

CVE-2018-6624

Produtos afetados

Omron Ns

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-6624 · Nota de Segurança
• http://misteralfa-hack.blogspot.cl/2018/02/otomron-login-bypass.html · Nota
• https://osv.dev/vulnerability/CVE-2018-6624 · Aviso do Fabricante