PT-2019-8011 · Orpak · Orpak Siteomat

Publicado 2019-06-03 · Atualizado 2019-06-04 · CVE-2017-14852

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Orpak SiteOmat (affected versions not specified)

Description An insecure communication was found between a user and the Orpak SiteOmat management console due to an invalid SSL certificate. This allows an eavesdropper to capture the communication and decrypt the data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Encryption of Sensitive Data

Enumeração de Fraquezas

CWE-311

CWE-310

Identificadores relacionados

CVE-2017-14852

Produtos afetados

Orpak Siteomat

Referências · 6

• https://osv.dev/vulnerability/CVE-2017-14852 · Aviso do Fabricante
• http://orpak.com · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-19-122-01 · Nota
• https://t.me/cibsecurity/4651 · Publicação no Telegram
• http://securityfocus.com/bid/108167 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-14852 · Nota de Segurança