Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-722f-77g4-vmm4

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

MEDIA NAVI Inc SMACom v1.2 was discovered to contain an insecure session validation vulnerability in the session handling of the password authentication parameter of the wifi photo transfer module. This vulnerability allows attackers with network access privileges or on public wifi networks to read the authentication credentials and follow-up requests containing the user password via a man in the middle attack.

MEDIA NAVI Inc SMACom v1.2 was discovered to contain an insecure session validation vulnerability in the session handling of the password authentication parameter of the wifi photo transfer module. This vulnerability allows attackers with network access privileges or on public wifi networks to read the authentication credentials and follow-up requests containing the user password via a man in the middle attack.

EPSS

Процентиль: 50%
0.00269
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 5.9
nvd
больше 4 лет назад

MEDIA NAVI Inc SMACom v1.2 was discovered to contain an insecure session validation vulnerability in the session handling of the `password` authentication parameter of the wifi photo transfer module. This vulnerability allows attackers with network access privileges or on public wifi networks to read the authentication credentials and follow-up requests containing the user password via a man in the middle attack.

EPSS

Процентиль: 50%
0.00269
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-522