← Voltar para CVEs

CVE-2019-13352

N/A

Descricao

WolfVision Cynap before 1.30j uses a static, hard-coded cryptographic secret for generating support PINs for the 'forgot password' feature. By knowing this static secret and the corresponding algorithm for calculating support PINs, an attacker can reset the ADMIN password and thus gain remote access.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado7/5/2019

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

wolfvision:cynap

Fraquezas (CWE)

CWE-798

Referencias

http://packetstormsecurity.com/files/153530/WolfVision-Cynap-1.18g-1.28j-Hardcoded-Credential.html(cve@mitre.org)

http://seclists.org/fulldisclosure/2019/Jul/9(cve@mitre.org)

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-021.txt(cve@mitre.org)

http://packetstormsecurity.com/files/153530/WolfVision-Cynap-1.18g-1.28j-Hardcoded-Credential.html(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2019/Jul/9(af854a3a-2127-422b-91ae-364da2661108)

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-021.txt(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.