PT-2022-7912 · Unknown · Sicunet Access Controller

Andrew Griffiths · Published 2022-06-11 · Updated 2022-06-17 · CVE-2017-20039

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SICUNET Access Controller version 0.32-05z

Description A very critical issue has been identified, affecting an unknown part of the system. The manipulation leads to weak authentication, and it is possible to initiate the attack remotely.

Recommendations For SICUNET Access Controller version 0.32-05z, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-259

CWE-798

Related Identifiers

CVE-2017-20039

Affected Products

Sicunet Access Controller

References · 5

• https://osv.dev/vulnerability/CVE-2017-20039 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-20039 · Security Note
• http://seclists.org/fulldisclosure/2017/Mar/25 · Note
• https://t.me/cvenotify/31470 · Telegram Post
• https://vuldb.com/?id.98907 · Note