Session fixation

2017-11-1714:29:00

PRIOn knowledge base

www.prio-n.com

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.8%

JSON

Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmware versions prior to 79.17.17.09, RX-CLV2-B firmware versions prior to 89.07.17.09, RX-CLV3-N firmware versions prior to 91.09.17.10 allows an attacker on the same LAN to perform arbitrary operations or access information via unspecified vectors.

CPENameOperatorVersion
rx-clv1-p_firmwarelt79.17.17.09
rx-clv2-b_firmwarelt89.07.17.09
rx-clv3-n_firmwarelt91.09.17.10
rx-v100_firmwarelt03.29.17.09
rx-v200_firmwarelt09.87.17.09

Name	Operator	Version
rx-clv1-p_firmware	lt	79.17.17.09
rx-clv2-b_firmware	lt	89.07.17.09
rx-clv3-n_firmware	lt	91.09.17.10
rx-v100_firmware	lt	03.29.17.09
rx-v200_firmware	lt	09.87.17.09

References

jvn.jp/en/jp/JVN76382932/index.html