PT-2019-1308 · Unknown · Iiot Monitor

Rgod · Publicado 2019-01-14 · Atualizado 2019-06-07 · CVE-2018-7839

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IIoT Monitor version 3.1.38

Description A cryptographic issue exists in the software, which could allow information disclosure due to errors in the use of cryptography. This could enable an attacker to disclose protected information.

Recommendations For IIoT Monitor version 3.1.38, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

BDU:2019-00573

CVE-2018-7839

ZDI-19-031

Produtos afetados

Iiot Monitor

Referências · 6

• https://schneider-electric.com/en/download/document/SEVD-2018-354-03 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-7839 · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-19-008-02 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-7839 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-19-031 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-00573 · Nota de Segurança