Design/Logic Flaw

2006-05-3122:02:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.7%

JSON

The Administration Console in Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 does not enforce access control, which allows remote attackers to gain access to servers via the console.

References

secunia.com/advisories/20378

securitytracker.com/id?1016184

www.kb.cert.org/vuls/id/397417

www.kb.cert.org/vuls/id/WDON-6QANYE

www.vupen.com/english/advisories/2006/2069

exchange.xforce.ibmcloud.com/vulnerabilities/26760