INSTEON Hub CVE-2013-4859 Multiple Security Bypass Vulnerabilities
BID:61580
Info
INSTEON Hub CVE-2013-4859 Multiple Security Bypass Vulnerabilities
| Bugtraq ID: | 61580 |
| Class: | Unknown |
| CVE: |
CVE-2013-4859 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 01 2013 12:00AM |
| Updated: | Aug 01 2013 12:00AM |
| Credit: | Trustwave SpiderLabs |
| Vulnerable: |
INSTEON INSTEON Hub 2242-222 |
| Not Vulnerable: |
INSTEON INSTEON Hub 2422-222R |
Discussion
INSTEON Hub CVE-2013-4859 Multiple Security Bypass Vulnerabilities
INSTEON Hub is prone to multiple security-bypass vulnerabilities.
An attacker may exploit these issues to bypass certain security restrictions and perform unauthorized actions.
INSTEON Hub 2242-222 is vulnerable; other versions may also be affected.
INSTEON Hub is prone to multiple security-bypass vulnerabilities.
An attacker may exploit these issues to bypass certain security restrictions and perform unauthorized actions.
INSTEON Hub 2242-222 is vulnerable; other versions may also be affected.
Solution / Fix
INSTEON Hub CVE-2013-4859 Multiple Security Bypass Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
INSTEON Hub CVE-2013-4859 Multiple Security Bypass Vulnerabilities
References:
References:
- INSTEON Hub Homepage (INSTEON)
- Trustwave SpiderLabs Security Advisory TWSL2013-023: Lack of Web and API Authent (Trustwave Advisories)