Описание
Bettini Srl GAMS Product Line v4.3.0 was discovered to re-use static SSH keys across installations, allowing unauthenticated attackers to login as root users via extracting a key from the software.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:bettinivideo:sgsetup:4.3.0:*:*:*:*:*:*:*
EPSS
Процентиль: 82%
0.01801
Низкий
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-798
Связанные уязвимости
CVSS3: 9.8
github
почти 4 года назад
Bettini Srl GAMS Product Line v4.3.0 was discovered to re-use static SSH keys across installations, allowing unauthenticated attackers to login as root users via extracting a key from the software.
EPSS
Процентиль: 82%
0.01801
Низкий
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-798