Default credentials

2020-12-3108:15:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.2%

JSON

HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.

CPENameOperatorVersion
msr45_isherlock-antispameq< 4.5-130
msr45_isherlock-auditeq< 4.5-143
msr45_isherlock-baseeq< 4.5-243
msr45_isherlock-usereq< 4.5-114
msr45_isherlock-useradmineq< 4.5-122
ssr45_isherlock-antispameq< 4.5-130
ssr45_isherlock-auditeq< 4.5-143
ssr45_isherlock-baseeq< 4.5-243
ssr45_isherlock-usereq< 4.5-114
ssr45_isherlock-useradmineq< 4.5-112

Name	Operator	Version
msr45_isherlock-antispam	eq	< 4.5-130
msr45_isherlock-audit	eq	< 4.5-143
msr45_isherlock-base	eq	< 4.5-243
msr45_isherlock-user	eq	< 4.5-114
msr45_isherlock-useradmin	eq	< 4.5-122
ssr45_isherlock-antispam	eq	< 4.5-130
ssr45_isherlock-audit	eq	< 4.5-143
ssr45_isherlock-base	eq	< 4.5-243
ssr45_isherlock-user	eq	< 4.5-114
ssr45_isherlock-useradmin	eq	< 4.5-112

References

www.twcert.org.tw/tw/cp-132-4256-cfc5a-1.html