Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gcjj-c9q9-5q75

Опубликовано: 20 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext using simple base64 encoding during every POST request made to the server.

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext using simple base64 encoding during every POST request made to the server.

EPSS

Процентиль: 6%
0.00023
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-312
CWE-539

Связанные уязвимости

CVSS3: 7.5
nvd
3 месяца назад

FS Inc S3150-8T2F 8-Port Gigabit Ethernet L2+ Switch, 8 x Gigabit RJ45, with 2 x 1Gb SFP, Fanless. All versions before 2.2.0D Build 135103 were discovered to transmit cookies for their web based administrative application containing usernames and passwords. These were transmitted in cleartext using simple base64 encoding during every POST request made to the server.

EPSS

Процентиль: 6%
0.00023
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-312
CWE-539