CVE-2019-13525

2019-10-2517:57:13

CWE-306

icscert

www.cve.org

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

In IP-AK2 Access Control Panel Version 1.04.07 and prior, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data, which can be accessed without authentication over the network.

CNA Affected

[
  {
    "product": "Honeywell IP-AK2",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "IP-AK2 Access Control Panel Version 1.04.07 and prior"
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/icsa-19-297-02