PT-2012-3554 · Koyo · H2-Ecom-F+7

Published 2012-04-13 · Updated 2017-12-20 · CVE-2012-1806

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 (affected versions not specified)

Description The issue concerns the ECOM Ethernet module, which has a maximum password length of 8 bytes. This limitation makes it easier for remote attackers to gain access via a brute-force attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2012-1806

Affected Products

H0-Ecom

H0-Ecom100

H2-Ecom

H2-Ecom-F

H2-Ecom100

H4-Ecom

H4-Ecom-F

H4-Ecom100

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-1806 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74876 · Note
• http://us-cert.gov/control_systems/pdf/ICSA-12-102-02.pdf · Note