Lucene search
PRIOn knowledge basePRION:CVE-2020-35586HistoryDec 23, 2020 - 3:15 p.m.
Design/Logic Flaw
2020-12-2315:15:00
PRIOn knowledge base
www.prio-n.com
1
In Solstice Pod before 3.3.0 (or Open4.3), the Administrator password can be enumerated using brute-force attacks via the /Config/service/initModel?password= Solstice Open Control API because there is no complexity requirement (e.g., it might be all digits or all lowercase letters).
| CPE | Name | Operator | Version |
|---|---|---|---|
| solstice_pod_firmware | lt | 3.0.3 |
Related
nvd
nvd
CVE-2020-35586
2020-12-23 15:15:16
cve
cve
CVE-2020-35586
2020-12-23 15:15:16
cvelist
cvelist
CVE-2020-35586
2020-12-23 14:58:20