Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pcrr-f2jc-hpgc

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 do not require authentication from Alarm Receiving Center (ARC) servers, which allows man-in-the-middle attackers to bypass intended access restrictions via a spoofed HSxx response.

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 do not require authentication from Alarm Receiving Center (ARC) servers, which allows man-in-the-middle attackers to bypass intended access restrictions via a spoofed HSxx response.

EPSS

Процентиль: 66%
0.00513
Низкий

Дефекты

CWE-287

Связанные уязвимости

nvd
около 10 лет назад

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 do not require authentication from Alarm Receiving Center (ARC) servers, which allows man-in-the-middle attackers to bypass intended access restrictions via a spoofed HSxx response.

EPSS

Процентиль: 66%
0.00513
Низкий

Дефекты

CWE-287