CVE-2019-13525

MEDIUM

5.3

Description

In IP-AK2 Access Control Panel Version 1.04.07 and prior, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data, which can be accessed without authentication over the network.

CVE Details

CVSS v3.1 Score5.3

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published10/25/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

honeywell:ip-ak2honeywell:ip-ak2_firmware

Weaknesses (CWE)

CWE-306CWE-306

References

https://www.us-cert.gov/ics/advisories/icsa-19-297-02(ics-cert@hq.dhs.gov)

https://www.us-cert.gov/ics/advisories/icsa-19-297-02(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.