HIGH🇵🇱 Wersja polska

CVE-2019-17219

CVSS 8.8v3.1pub. 2019-10-06upd. 2024-11-21

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. By default, the device does not enforce any authentication. An adjacent attacker is able to use the network interface without proper access control.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Vzug Combi Stream Mslq

    HW
    Vzug
    all versions

  • Vzug Combi Stream Mslq Firmware

    OS
    Vzug
    < ethernet_r07< wlan_r05
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2019-17215CRITICAL9.8PL ✓same product

Brak ochrony przed brute-force w urządzeniach V-Zug Combi-Steam MSLQ

CVE-2019-17216CRITICAL9.8PL ✓same product

V-Zug Combi-Steam MSLQ: słabe hashowanie haseł z użyciem MD5

CVE-2019-17218CRITICAL9.1PL ✓same product

V-Zug Combi-Steam MSLQ — niezaszyfrowana komunikacja HTTP z web service

CVE-2019-17217HIGH8.8same product

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. There is no...