Описание
During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed for unauthenticated username enumeration through the VAPIX Device Configuration SSH Management API.
EPSS
Процентиль: 16%
0.00051
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-203
Связанные уязвимости
CVSS3: 4.3
github
7 месяцев назад
During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed for unauthenticated username enumeration through the VAPIX Device Configuration SSH Management API.
EPSS
Процентиль: 16%
0.00051
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-203