Описание
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded in client-side JavaScript. Because the key is static and exposed, an attacker can decrypt protected values and defeat confidentiality protections.
Ссылки
- Product
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до V300SP10260209 (включая)
Одновременно
cpe:2.3:o:binardat:10g08-0800gsm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:binardat:10g08-0800gsm:-:*:*:*:*:*:*:*
EPSS
Процентиль: 8%
0.00186
Низкий
7.5 High
CVSS3
Дефекты
CWE-321
Связанные уязвимости
CVSS3: 7.5
github
6 месяцев назад
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded in client-side JavaScript. Because the key is static and exposed, an attacker can decrypt protected values and defeat confidentiality protections.
EPSS
Процентиль: 8%
0.00186
Низкий
7.5 High
CVSS3
Дефекты
CWE-321