CVE-2017-7919

Опубликовано: 03 июл. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator (URL).

Ссылки

http://www.securityfocus.com/bid/99291
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-178-01
Mitigation
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/99291
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-178-01
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:newport:xps-cx_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:newport:xps-cx:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:newport:xps-qx_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:newport:xps-qx:-:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.0125

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-6m9q-xx8f-3w42