Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7qw8-4g2g-2m86

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers, which makes it easier for remote attackers to hijack sessions by predicting a value.

The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers, which makes it easier for remote attackers to hijack sessions by predicting a value.

EPSS

Процентиль: 84%
0.02177
Низкий

Связанные уязвимости

nvd
больше 12 лет назад

The authentication implementation in the web server on Siemens SCALANCE X-200 switches with firmware before 5.0.0 does not use a sufficient source of entropy for generating values of random numbers, which makes it easier for remote attackers to hijack sessions by predicting a value.

EPSS

Процентиль: 84%
0.02177
Низкий