The web server on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 allows remote attackers to obtain sensitive configuration and status information by reading log files.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NDigital Alert Systems Dasdec Eas
HWDigital Alert Systems2.0-0≤ 2.0-1Monroe Electronics R189 One Net Eas
HWMonroe Electronics2.0-0≤ 2.0-1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Referencje
Powiązane podatności
CVE-2013-0137HIGH10.0ten sam produkt
The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electroni...
CVE-2013-4732HIGH10.0ten sam produkt
The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Elec...
CVE-2013-4734HIGH7.3ten sam produkt
dasdec_mkuser on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-...
CVE-2013-4735HIGH10.0ten sam produkt
The Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device be...