PT-2019-8603 · Hanwha Techwin · Srn-4000

Publicado 2019-04-08 · Atualizado 2019-10-09 · CVE-2017-7912

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hanwha Techwin SRN-4000 versions prior to SRN4000 v2.16 170401

Description A specially crafted http request and response could allow an attacker to gain access to the device management page with admin privileges without proper authentication.

Recommendations For versions prior to SRN4000 v2.16 170401, update the firmware to SRN4000 v2.16 170401 or later to resolve the issue.

Correção

Improper Access Control

Improper Authentication

Enumeração de Fraquezas

CWE-284

CWE-287

Identificadores relacionados

CVE-2017-7912

Produtos afetados

Srn-4000

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-7912 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7912 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-17-136-03 · Nota