PT-2019-16079 · Netis · Netis Dl4323

Publicado 2019-12-29 · Atualizado 2020-08-24 · CVE-2019-20074

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netis DL4323 (affected versions not specified)

Description The issue allows any user role to access sensitive information, including user passwords and the FTP password, by visiting the "form2saveConf.cgi" page.

Recommendations For Netis DL4323 devices, restrict access to the "form2saveConf.cgi" page until a patch is available.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2019-20074

Produtos afetados

Netis Dl4323

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-20074 · Nota de Segurança
• https://fatihhcelik.blogspot.com/2019/12/clear-text-password-netis-dl4323.html · Nota
• https://drive.google.com/open?id=1MH6DMhP1JsV_RptGXDze0Vo9MDuCH9se · Nota