Authentication flaw

2017-10-0521:29:00

PRIOn knowledge base

www.prio-n.com

8.4 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.4%

JSON

An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution.

CPENameOperatorVersion
lvis-3me_firmwarele6.1.1

CPE	Name	Operator	Version
	lvis-3me_firmware	le	6.1.1

References

www.securityfocus.com/bid/100847

ics-cert.us-cert.gov/advisories/ICSA-17-257-01