| |
Vulnerability CVE-2019-15015
Published: 2019-10-09
Description: |
In the Zingbox Inspector, versions 1.294 and earlier, hardcoded credentials for root and inspector user accounts are present in the system software, which can result in unauthorized users gaining access to the system. |
Type:
CWE-798
CVSS2 => (AV:L/AC:L/Au:N/C:C/I:C/A:C)
CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
7.2/10 |
10/10 |
3.9/10 |
Exploit range |
Attack complexity |
Authentication |
Local |
Low |
No required |
Confidentiality impact |
Integrity impact |
Availability impact |
Complete |
Complete |
Complete |
References: |
https://securityadvisories.paloaltonetworks.com/Home/Detail/170
|
|
|
closedb();
?>
Copyright 2024, cxsecurity.com
|
|
|