CVE-2018-12455

Опубликовано: 10 окт. 2018

Источник: nvd

CVSS3: 8.1

CVSS2: 9.3

EPSS Средний

Описание

Intelbras NPLUG 1.0.0.14 wireless repeater devices have a critical vulnerability that allows an attacker to authenticate in the web interface just by using "admin:" as the name of a cookie.

Ссылки

http://seclists.org/fulldisclosure/2018/Oct/18
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2018/Oct/18
Exploit
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:intelbras:nplug_firmware:1.0.0.14:*:*:*:*:*:*:*

cpe:2.3:h:intelbras:nplug:-:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.24004

Средний

8.1 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-jq56-qcgv-3phx