PT-2019-5721 · Advantech · Advantech Spectre Rt Ert351

Publicado 2019-04-25 · Atualizado 2021-03-23 · CVE-2019-18235

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Advantech Spectre RT ERT351 versions 5.1.3 and prior

Description The issue is related to insufficient login authentication parameters in the web application, which may allow an attacker to gain full access using a brute-force password attack. This can be exploited by a remote attacker to guess the administrator's password.

Recommendations For versions 5.1.3 and prior, consider implementing additional authentication measures or restrictions to prevent brute-force attacks until a patch is available. As a temporary workaround, restrict access to the web application to minimize the risk of exploitation. Avoid using default or weak passwords for the administrator account until the issue is resolved.

Correção

Improper Restriction of Excessive Authentication Attempts

Enumeração de Fraquezas

CWE-307

Identificadores relacionados

BDU:2021-00844

CVE-2019-18235

Produtos afetados

Advantech Spectre Rt Ert351

Referências · 7

• https://t.me/cvenotify/11485 · Publicação no Telegram
• https://t.me/cibsecurity/25054 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2021-00844 · Nota de Segurança
• https://ep.advantech-bb.cz/support/router-models/download/511/sa-2021-01-fw-5.1.3-and-older-en.pdf · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-18235 · Aviso do Fabricante
• https://us-cert.cisa.gov/ics/advisories/icsa-21-054-03 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-18235 · Nota de Segurança