PT-2014-6451 · Schrack Technik · Microcontrol

C. Kudera · Published 2014-08-22 · Updated 2014-08-28 · CVE-2014-5396

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Schrack Technik microControl versions prior to 1.7.0

Description The issue concerns a hardcoded password for the user account in the web interface, making it easier for remote attackers to gain access.

Recommendations For versions prior to 1.7.0, update to version 1.7.0 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2014-5396

Affected Products

Microcontrol

References · 3

• 🔥 https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140710-2_Schrack_Technik_Microcontrol_Multiple_critical_vulnerabilities_v10.txt · Exploit
• 🔥 http://seclists.org/fulldisclosure/2014/Jul/40 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-5396 · Security Note