PT-2020-9805 · Dten · Dten D7+1

Published 2020-01-06 · Updated 2020-01-21 · CVE-2019-16271

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions DTEN D5 and D7 versions prior to 1.3.2

Description The issue allows remote attackers to read saved whiteboard image PDF documents without authentication. This can be done via the storage/emulated/0/Notes/PDF path on TCP port 8080.

Recommendations For DTEN D5 and D7 versions prior to 1.3.2, update to version 1.3.2 or later to resolve the issue. As a temporary workaround, consider restricting access to TCP port 8080 to minimize the risk of exploitation.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-16271

Affected Products

Dten D5

Dten D7

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-16271 · Security Note
• https://osv.dev/vulnerability/CVE-2019-16271 · Vendor Advisory
• https://forescout.com/company/blog/dten-vulnerability · Note