Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5v2p-2vjm-j3w4

Опубликовано: 14 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Penta Security Systems Inc WAPPLES 4.0., 5.0.0., 5.0.12.* are vulnerable to Incorrect Access Control. The operating system that WAPPLES runs on has a built-in non-privileged user penta with a predefined password. The password for this user, as well as its existence, is not disclosed in the documentation. Knowing the credentials, attackers can use this feature to gain uncontrolled access to the device and therefore are considered an undocumented possibility for remote control.

Penta Security Systems Inc WAPPLES 4.0., 5.0.0., 5.0.12.* are vulnerable to Incorrect Access Control. The operating system that WAPPLES runs on has a built-in non-privileged user penta with a predefined password. The password for this user, as well as its existence, is not disclosed in the documentation. Knowing the credentials, attackers can use this feature to gain uncontrolled access to the device and therefore are considered an undocumented possibility for remote control.

EPSS

Процентиль: 53%
0.00296
Низкий

8.8 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 8.8
nvd
больше 3 лет назад

Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect Access Control. The operating system that WAPPLES runs on has a built-in non-privileged user penta with a predefined password. The password for this user, as well as its existence, is not disclosed in the documentation. Knowing the credentials, attackers can use this feature to gain uncontrolled access to the device and therefore are considered an undocumented possibility for remote control.

EPSS

Процентиль: 53%
0.00296
Низкий

8.8 High

CVSS3

Дефекты

CWE-863