CVE-2018-15807

N/A

Description

POSIM EVO 15.13 for Windows includes an "Emergency Override" administrative account that may be accessed through POSIM's "override" feature. This Override prompt expects a code that is computed locally using a deterministic algorithm. This code may be generated by an attacker and used to bypass any POSIM EVO login prompt.

CVE Details

CVSS v3.1 ScoreN/A

Published8/23/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

posim:evo

Weaknesses (CWE)

CWE-330

References

https://versprite.com/advisories/posim-evo-for-windows/(cve@mitre.org)

https://versprite.com/advisories/posim-evo-for-windows/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.