Entes EMG12 Authentication Bypass and Information Disclosure Vulnerabilities
BID:105489
CVE-2018-14822 | CVE-2018-14826 |Info
Entes EMG12 Authentication Bypass and Information Disclosure Vulnerabilities
| Bugtraq ID: | 105489 |
| Class: | Design Error |
| CVE: |
CVE-2018-14826 CVE-2018-14822 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 02 2018 12:00AM |
| Updated: | Oct 02 2018 12:00AM |
| Credit: | Can Demirel of Biznet Bilisim. |
| Vulnerable: |
Entes EMG12 2.57 |
| Not Vulnerable: | |
Discussion
Entes EMG12 Authentication Bypass and Information Disclosure Vulnerabilities
Entes EMG12 is prone to an authentication-bypass vulnerability and an information-disclosure vulnerability.
Attackers may exploit these issues to gain unauthorized access to the affected device or to obtain sensitive information that may aid in launching further attacks.
Entes EMG12 is prone to an authentication-bypass vulnerability and an information-disclosure vulnerability.
Attackers may exploit these issues to gain unauthorized access to the affected device or to obtain sensitive information that may aid in launching further attacks.
Exploit / POC
Entes EMG12 Authentication Bypass and Information Disclosure Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Entes EMG12 Authentication Bypass and Information Disclosure Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Entes EMG12 Authentication Bypass and Information Disclosure Vulnerabilities
References:
References:
- Entes Home Page (Entes)
- Advisory (ICSA-18-275-03) Entes EMG 12 (Entes)