Schrack Emergency Lights System Multiple Security Vulnerabilities
BID:68484
Info
Schrack Emergency Lights System Multiple Security Vulnerabilities
| Bugtraq ID: | 68484 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-5396 CVE-2014-8329 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 10 2014 12:00AM |
| Updated: | Oct 21 2014 04:00PM |
| Credit: | C. Kudera |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Schrack Emergency Lights System Multiple Security Vulnerabilities
Schrack Emergency Lights System is prone to the following security vulnerabilities:
1. An insecure-default-password vulnerability
2. An authentication-bypass vulnerability
3. Multiple HTML-injection vulnerabilities
4. An information-disclosure vulnerability
An attacker can leverage these issues to bypass authentication mechanism, perform unauthorized actions, obtain sensitive information and execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Versions prior to Schrack Emergency Lights System 1.7.0 (937) are vulnerable.
Schrack Emergency Lights System is prone to the following security vulnerabilities:
1. An insecure-default-password vulnerability
2. An authentication-bypass vulnerability
3. Multiple HTML-injection vulnerabilities
4. An information-disclosure vulnerability
An attacker can leverage these issues to bypass authentication mechanism, perform unauthorized actions, obtain sensitive information and execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Versions prior to Schrack Emergency Lights System 1.7.0 (937) are vulnerable.
Exploit / POC
Schrack Emergency Lights System Multiple Security Vulnerabilities
An attacker may use readily available tools or browser to exploit these issues.
An attacker may use readily available tools or browser to exploit these issues.
Solution / Fix
Schrack Emergency Lights System Multiple Security Vulnerabilities
Solution:
Reportedly, these issues are fixed; however, Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reportedly, these issues are fixed; however, Symantec has not confirmed this. Please contact the vendor for more information.
References
Schrack Emergency Lights System Multiple Security Vulnerabilities
References:
References: