PT-2019-16079 · Netis · Netis Dl4323

Published 2019-12-29 · Updated 2020-08-24 · CVE-2019-20074

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netis DL4323 (affected versions not specified)

Description The issue allows any user role to access sensitive information, including user passwords and the FTP password, by visiting the "form2saveConf.cgi" page.

Recommendations For Netis DL4323 devices, restrict access to the "form2saveConf.cgi" page until a patch is available.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2019-20074

Affected Products

Netis Dl4323

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-20074 · Security Note
• https://fatihhcelik.blogspot.com/2019/12/clear-text-password-netis-dl4323.html · Note
• https://drive.google.com/open?id=1MH6DMhP1JsV_RptGXDze0Vo9MDuCH9se · Note