PT-2019-17898 · Idoors · Idoors Reader

Yusuke Nakano · Publicado 2019-07-05 · Atualizado 2019-07-10 · CVE-2019-5964

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iDoors Reader versions 2.10.17 and earlier

Description The issue allows an attacker on the same network segment to bypass authentication, accessing the management console and operating the product. The exact vectors used for this bypass are not specified.

Recommendations For versions 2.10.17 and earlier, update to a version later than 2.10.17 to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2019-5964

Produtos afetados

Idoors Reader

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-5964 · Nota de Segurança
• https://jvn.jp/en/jp/JVN28218613/index.html · Nota
• https://idoors.jp/info/20190701 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-5964 · Aviso do Fabricante