PT-2019-15008 · V Zug · V-Zug Combi-Steam Mslq

Marc Ruef · Published 2019-10-06 · Updated 2020-08-24 · CVE-2019-17215

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions V-Zug Combi-Steam MSLQ devices before Ethernet R07 V-Zug Combi-Steam MSLQ devices before WLAN R05

Description An issue was discovered where there is no bruteforce protection established, allowing an attacker to potentially bruteforce the password and authenticate on the device.

Recommendations For V-Zug Combi-Steam MSLQ devices before Ethernet R07, update to Ethernet R07 or later to resolve the issue. For V-Zug Combi-Steam MSLQ devices before WLAN R05, update to WLAN R05 or later to resolve the issue. As a temporary workaround, consider restricting access to the device or implementing additional security measures to minimize the risk of exploitation.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2019-17215

Affected Products

V-Zug Combi-Steam Mslq

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-17215 · Security Note
• https://osv.dev/vulnerability/CVE-2019-17215 · Vendor Advisory
• https://vuldb.com/?id.140463 · Note