dasdec_mkuser on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 generates predictable passwords, which might make it easier for attackers to obtain non-administrative access via unspecified vectors.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LDigital Alert Systems Dasdec Eas
HWDigital Alert Systems2.0-0≤ 2.0-1Monroe Electronics R189 One Net Eas
HWMonroe Electronics2.0-0≤ 2.0-1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Referencje
Powiązane podatności
CVE-2013-0137HIGH10.0ten sam produkt
The default configuration of the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electroni...
CVE-2013-4732HIGH10.0ten sam produkt
The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Elec...
CVE-2013-4733HIGH7.5ten sam produkt
The web server on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One...
CVE-2013-4735HIGH10.0ten sam produkt
The Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device be...