Authentication flaw

2019-10-2518:15:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

In IP-AK2 Access Control Panel Version 1.04.07 and prior, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data, which can be accessed without authentication over the network.

CPENameOperatorVersion
ip-ak2_firmwarelt1.04.07

CPE	Name	Operator	Version
	ip-ak2_firmware	lt	1.04.07

References

www.us-cert.gov/ics/advisories/icsa-19-297-02