PT-2014-8928 · Entrypass · Entrypass N5200 Active Network Control Panel

Published 2014-12-07 · Updated 2018-10-09 · CVE-2014-9303

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions EntryPass N5200 Active Network Control Panel (affected versions not specified)

Description The issue allows remote attackers to read device memory and obtain the administrator username and password via a URL starting with an ASCII character o through z or A through D.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-9303

Affected Products

Entrypass N5200 Active Network Control Panel

References · 5

• 🔥 https://redteam-pentesting.de/advisories/rt-sa-2014-011 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2014/Dec/2 · Exploit
• 🔥 https://exploit-db.com/exploits/35442 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-9303 · Security Note
• http://securityfocus.com/archive/1/534128/100/0/threaded · Note