Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-prxv-hgr8-whhf

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

The web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 generates session cookies with insufficient entropy, which makes it easier for remote attackers to hijack sessions via a brute-force attack.

The web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 generates session cookies with insufficient entropy, which makes it easier for remote attackers to hijack sessions via a brute-force attack.

EPSS

Процентиль: 64%
0.00471
Низкий

8.1 High

CVSS3

Дефекты

CWE-331

Связанные уязвимости

CVSS3: 8.1
nvd
почти 8 лет назад

The web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape Desk Phone IP V3 devices before R3.32.0 generates session cookies with insufficient entropy, which makes it easier for remote attackers to hijack sessions via a brute-force attack.

EPSS

Процентиль: 64%
0.00471
Низкий

8.1 High

CVSS3

Дефекты

CWE-331