CVE-2012-3024

Опубликовано: 16 авг. 2012

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.

Ссылки

http://www.tridium.com/cs/tridium_news/security_patch_36
Broken Link
Patch
Vendor Advisory
http://www.us-cert.gov/control_systems/pdf/ICSA-12-228-01.pdf
Broken Link
Third Party Advisory
US Government Resource
http://www.tridium.com/cs/tridium_news/security_patch_36
Broken Link
Patch
Vendor Advisory
http://www.us-cert.gov/control_systems/pdf/ICSA-12-228-01.pdf
Broken Link
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tridium:niagara_ax:*:*:*:*:*:*:*:*

Версия до 3.6 (включая)

EPSS

Процентиль: 50%

0.00266

Низкий

5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-57j6-cjr9-cw4x

github

больше 3 лет назад