PT-2019-12831 · Inateck · Inateck Bcst-60

Matthias Deeg · Publicado 2019-11-30 · Atualizado 2020-08-24 · CVE-2019-12503

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Inateck BCST-60 (affected versions not specified)

Description The Inateck BCST-60 wireless barcode scanner is prone to keystroke injection attacks due to unencrypted and unauthenticated data communication. This allows an attacker to send arbitrary keystrokes to a victim's computer system, potentially installing malware when the target system is unattended, and enabling remote control over the victim's computer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Missing Authentication

Enumeração de Fraquezas

CWE-319

CWE-306

Identificadores relacionados

CVE-2019-12503

Produtos afetados

Inateck Bcst-60

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-12503 · Nota de Segurança
• http://seclists.org/fulldisclosure/2019/Nov/30 · Nota
• https://t.me/defcon_news/31631 · Publicação no Telegram
• https://t.me/cibsecurity/8436 · Publicação no Telegram
• https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-027.txt · Nota
• http://packetstormsecurity.com/files/155503/Inateck-BCST-60-Barcode-Scanner-Keystroke-Injection.html · Nota