PT-2016-6614 · Zmodo · Zmodo Zp-Ibh-13W+1

Garrett Miller + 1 · Published 2016-08-24 · Updated 2016-11-28 · CVE-2016-5650

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ZModo ZP-NE14-S and ZP-IBH-13W devices (affected versions not specified)

Description The issue concerns a lack of enforcement of a WPA2 configuration setting, allowing remote attackers to trigger association with an arbitrary access point by using a recognized SSID value.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2016-5650

Affected Products

Zmodo Zp-Ibh-13W

Zmodo Zp-Ne14-S

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-5650 · Security Note
• http://kb.cert.org/vuls/id/301735 · Note
• http://securityfocus.com/bid/92449 · Note