Authentication flaw

2019-12-0618:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.5%

JSON

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Authentication Information used in a cookie is predictable and can lead to admin password compromise when captured on the network.

CPENameOperatorVersion
ie-sw-pl08m-6tx-2sc_firmwarele3.3.8
ie-sw-pl08m-6tx-2scs_firmwarele3.3.8
ie-sw-pl08m-6tx-2st_firmwarele3.3.8
ie-sw-pl08m-8tx_firmwarele3.3.8
ie-sw-pl08mt-6tx-2sc_firmwarele3.3.8
ie-sw-pl08mt-6tx-2scs_firmwarele3.3.8
ie-sw-pl08mt-6tx-2st_firmwarele3.3.8
ie-sw-pl08mt-8tx_firmwarele3.3.8
ie-sw-pl09m-5gc-4gt_firmwarele3.3.4
ie-sw-pl09mt-5gc-4gt_firmwarele3.3.4

Name	Operator	Version
ie-sw-pl08m-6tx-2sc_firmware	le	3.3.8
ie-sw-pl08m-6tx-2scs_firmware	le	3.3.8
ie-sw-pl08m-6tx-2st_firmware	le	3.3.8
ie-sw-pl08m-8tx_firmware	le	3.3.8
ie-sw-pl08mt-6tx-2sc_firmware	le	3.3.8
ie-sw-pl08mt-6tx-2scs_firmware	le	3.3.8
ie-sw-pl08mt-6tx-2st_firmware	le	3.3.8
ie-sw-pl08mt-8tx_firmware	le	3.3.8
ie-sw-pl09m-5gc-4gt_firmware	le	3.3.4
ie-sw-pl09mt-5gc-4gt_firmware	le	3.3.4