CVE-2019-17219

HIGH

8.8

Description

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. By default, the device does not enforce any authentication. An adjacent attacker is able to use the network interface without proper access control.

CVE Details

CVSS v3.1 Score8.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorADJACENT_NETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published10/6/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

vzug:combi-stream_mslqvzug:combi-stream_mslq_firmware

Weaknesses (CWE)

CWE-306

References

https://vuldb.com/?id.134115(cve@mitre.org)

https://vuldb.com/?id.134115(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.