PT-2019-15008 · V Zug · V-Zug Combi-Steam Mslq

Marc Ruef · Publicado 2019-10-06 · Atualizado 2020-08-24 · CVE-2019-17215

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions V-Zug Combi-Steam MSLQ devices before Ethernet R07 V-Zug Combi-Steam MSLQ devices before WLAN R05

Description An issue was discovered where there is no bruteforce protection established, allowing an attacker to potentially bruteforce the password and authenticate on the device.

Recommendations For V-Zug Combi-Steam MSLQ devices before Ethernet R07, update to Ethernet R07 or later to resolve the issue. For V-Zug Combi-Steam MSLQ devices before WLAN R05, update to WLAN R05 or later to resolve the issue. As a temporary workaround, consider restricting access to the device or implementing additional security measures to minimize the risk of exploitation.

Correção

Improper Restriction of Excessive Authentication Attempts

Enumeração de Fraquezas

CWE-307

Identificadores relacionados

CVE-2019-17215

Produtos afetados

V-Zug Combi-Steam Mslq

Referências · 3

• https://vuldb.com/?id.140463 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-17215 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-17215 · Aviso do Fabricante