Authentication flaw

2022-04-0123:15:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.2%

JSON

Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users only. A malicious attacker could use this sensitive information’s to launch further attacks on the system.

CPENameOperatorVersion
ftmg_firmwarelt2.8
ftmg_firmwareeq2.8

CPE	Name	Operator	Version
	ftmg_firmware	lt	2.8
	ftmg_firmware	eq	2.8

References

sick.com/psirt