Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xvhw-jxmj-rx78

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET daemon using the default credentials if they have not been changed by the user.

An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET daemon using the default credentials if they have not been changed by the user.

EPSS

Процентиль: 42%
0.00202
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-311

Связанные уязвимости

CVSS3: 9.8
nvd
больше 6 лет назад

An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET daemon using the default credentials if they have not been changed by the user.

EPSS

Процентиль: 42%
0.00202
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-311