VAR-201602-0087
Vulnerability from variot - Updated: 2023-12-18 12:30Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network. Sauter moduWeb Vision is an embedded web-based SCADA system for HVAC. A remote attacker could exploit the vulnerability to obtain a certificate and bypass authentication. Sauter moduWeb Vision is prone to multiple security vulnerabilities: 1. Multiple information-disclosure vulnerabilities 2. A cross-site scripting vulnerability An attacker may leverage these issues to obtain potentially sensitive information, steal cookie based authentication credentials and to execute arbitrary HTML and script in the browser of an unsuspecting user in the context of the affected site. Other attacks may also be possible. Vulnerabilities
CVSS 10 - INSECURE CREDENTIAL STORAGE (Pass the Hash) CVE-2015-7914
CVSS 10 - INSECURE TRANSMISSION OF CREDENTIALS CVE-2015-7915
CVSS 7.4 - CROSS-SITE SCRIPTING CVE-2015-7916
Other risk exposures
Undocumented default accounts
Note that default accounts with changeable passwords, even when those are undocumented and do not look as user accounts neither in interface or documentation, constitute a formal vulnerability. It is at worst a misconfiguration.
References (Source)
This advisory:
https://www.outpost24.com/critical-scada-vulnerabilities-sauter-moduweb/
ICS CERT:
https://ics-cert.us-cert.gov/advisories/ICSA-16-033-01
Summary of the issues
In short \x96 By obtaining access to a system using undocumented accounts, it is possible to obtain a low privilege level.
By exploiting the fact that the cashed credentials used for the \x93remember me\x94 function of the web application employ the same encryption as the one used for protection of passwords included in backups, a user can elevate privileges to administrator level.
The backups also contain other encrypted configuration information which can further an attacker\x92s access to also affect for example email accounts used for notifications.
By accessing the system as an administrator, an attacker can obtain those credentials in plain text from the system as they are included in the configuration details, protected only by the use of \x93password\x94 field-types in the forms.
In essence this constitute a pass the hash vulnerability. Just as with https://www.outpost24.com/cve-2014-2717-attacking-the-honeywell-falcon-xlweb/ which used hashed inputs to generate secure transfer of credentials over non encrypted connections, applying the same protection scheme to its stored, and exposed, secrets.
Don\x92t do your own cryptography.
A bit more details, sufficient for the interested reader to recreate but not a straight forward guide, available at the provided references.
Martin Jartelius \x96 CSO \x96 Outpost24 John Stock \x96 Technology Program Director \x96 Outpost24
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201602-0087",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "moduweb vision",
"scope": "lte",
"trust": 1.0,
"vendor": "sauter",
"version": "1.5.5"
},
{
"model": "ey-ws505f0x0 moduweb vision",
"scope": "lt",
"trust": 0.8,
"vendor": "fr sauter",
"version": "1.6.0"
},
{
"model": "ey-ws505f0x0 moduweb vision",
"scope": "lt",
"trust": 0.6,
"vendor": "sauter",
"version": "1.6.0"
},
{
"model": "moduweb vision",
"scope": "eq",
"trust": 0.6,
"vendor": "sauter",
"version": "1.5.5"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "moduweb vision",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "624965d8-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2016-00978"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006885"
},
{
"db": "NVD",
"id": "CVE-2015-7915"
},
{
"db": "CNNVD",
"id": "CNNVD-201602-125"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:sauter:moduweb_vision:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "1.5.5",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2015-7915"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Martin Jartelius and John Stock of Outpost24.",
"sources": [
{
"db": "BID",
"id": "82408"
}
],
"trust": 0.3
},
"cve": "CVE-2015-7915",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Complete",
"baseScore": 10.0,
"confidentialityImpact": "Complete",
"exploitabilityScore": null,
"id": "CVE-2015-7915",
"impactScore": null,
"integrityImpact": "Complete",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CNVD-2016-00978",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "624965d8-2351-11e6-abef-000c29c66e3d",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
"version": "2.9 [IVD]"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "NVD",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2015-7915",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "CVE-2015-7915",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2016-00978",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201602-125",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "624965d8-2351-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "CRITICAL"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "624965d8-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2016-00978"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006885"
},
{
"db": "NVD",
"id": "CVE-2015-7915"
},
{
"db": "CNNVD",
"id": "CNNVD-201602-125"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network. Sauter moduWeb Vision is an embedded web-based SCADA system for HVAC. A remote attacker could exploit the vulnerability to obtain a certificate and bypass authentication. Sauter moduWeb Vision is prone to multiple security vulnerabilities:\n1. Multiple information-disclosure vulnerabilities\n2. A cross-site scripting vulnerability\nAn attacker may leverage these issues to obtain potentially sensitive information, steal cookie based authentication credentials and to execute arbitrary HTML and script in the browser of an unsuspecting user in the context of the affected site. Other attacks may also be possible. Vulnerabilities\n\n---------------\n\nCVSS 10 - INSECURE CREDENTIAL STORAGE (Pass the Hash) CVE-2015-7914\n\nCVSS 10 - INSECURE TRANSMISSION OF CREDENTIALS CVE-2015-7915\n\nCVSS 7.4 - CROSS-SITE SCRIPTING CVE-2015-7916\n\n \n\nOther risk exposures\n\n---------------\n\nUndocumented default accounts\n\n \n\nNote that default accounts with changeable passwords, even when those\nare undocumented and do not look as user accounts neither in interface\nor documentation, constitute a formal vulnerability. It is at worst a\nmisconfiguration. \n\n \n\nReferences (Source)\n\n---------------\n\nThis advisory:\n\nhttps://www.outpost24.com/critical-scada-vulnerabilities-sauter-moduweb/\n\n \n\nICS CERT:\n\nhttps://ics-cert.us-cert.gov/advisories/ICSA-16-033-01\n\n\nSummary of the issues\n---------------\nIn short \\x96 By obtaining access to a system using undocumented accounts,\nit is possible to obtain a low privilege level. \n\nBy exploiting the fact that the cashed credentials used for the\n\\x93remember me\\x94 function of the web application employ the same encryption\nas the one used for protection of passwords included in backups, a user\ncan elevate privileges to administrator level. \n\nThe backups also contain other encrypted configuration information which\ncan further an attacker\\x92s access to also affect for example email\naccounts used for notifications. \n\nBy accessing the system as an administrator, an attacker can obtain\nthose credentials in plain text from the system as they are included in\nthe configuration details, protected only by the use of \\x93password\\x94\nfield-types in the forms. \n\nIn essence this constitute a pass the hash vulnerability. Just as with\nhttps://www.outpost24.com/cve-2014-2717-attacking-the-honeywell-falcon-xlweb/\nwhich used hashed inputs to generate secure transfer of credentials over\nnon encrypted connections, applying the same protection scheme to its\nstored, and exposed, secrets. \n\n\nDon\\x92t do your own cryptography. \n\n \n\nA bit more details, sufficient for the interested reader to recreate but\nnot a straight forward guide, available at the provided references. \n\n \n\n \n\nMartin Jartelius \\x96 CSO \\x96 Outpost24\nJohn Stock \\x96 Technology Program Director \\x96 Outpost24\n\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2015-7915"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006885"
},
{
"db": "CNVD",
"id": "CNVD-2016-00978"
},
{
"db": "BID",
"id": "82408"
},
{
"db": "IVD",
"id": "624965d8-2351-11e6-abef-000c29c66e3d"
},
{
"db": "PACKETSTORM",
"id": "135615"
}
],
"trust": 2.7
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2015-7915",
"trust": 3.6
},
{
"db": "ICS CERT",
"id": "ICSA-16-033-01",
"trust": 3.4
},
{
"db": "CNVD",
"id": "CNVD-2016-00978",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201602-125",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006885",
"trust": 0.8
},
{
"db": "BID",
"id": "82408",
"trust": 0.3
},
{
"db": "IVD",
"id": "624965D8-2351-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "PACKETSTORM",
"id": "135615",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "624965d8-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2016-00978"
},
{
"db": "BID",
"id": "82408"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006885"
},
{
"db": "PACKETSTORM",
"id": "135615"
},
{
"db": "NVD",
"id": "CVE-2015-7915"
},
{
"db": "CNNVD",
"id": "CNNVD-201602-125"
}
]
},
"id": "VAR-201602-0087",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "624965d8-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2016-00978"
}
],
"trust": 1.8
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "624965d8-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2016-00978"
}
]
},
"last_update_date": "2023-12-18T12:30:04.562000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Web server for moduWeb Vision and moduWeb500 BACnet networks",
"trust": 0.8,
"url": "http://www.sauter-controls.com/en/products-sauter/product-details/pdm/ey-ws-500-web-server-for-moduweb-vision-and-moduweb500-bacnet-networks.html"
},
{
"title": "Sauter moduWeb Vision security bypass vulnerability patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/71355"
},
{
"title": "Sauter EY-WS505F0x0 moduWeb Vision Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=60077"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-00978"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006885"
},
{
"db": "CNNVD",
"id": "CNNVD-201602-125"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-255",
"trust": 1.8
},
{
"problemtype": "CWE-200",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-006885"
},
{
"db": "NVD",
"id": "CVE-2015-7915"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.4,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-16-033-01"
},
{
"trust": 1.0,
"url": "http://seclists.org/fulldisclosure/2016/feb/25"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7915"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-7915"
},
{
"trust": 0.3,
"url": "http://www.sauter-controls.com/en.html"
},
{
"trust": 0.1,
"url": "https://www.outpost24.com/critical-scada-vulnerabilities-sauter-moduweb/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-7916"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-7915"
},
{
"trust": 0.1,
"url": "https://www.outpost24.com/cve-2014-2717-attacking-the-honeywell-falcon-xlweb/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2015-7914"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-00978"
},
{
"db": "BID",
"id": "82408"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006885"
},
{
"db": "PACKETSTORM",
"id": "135615"
},
{
"db": "NVD",
"id": "CVE-2015-7915"
},
{
"db": "CNNVD",
"id": "CNNVD-201602-125"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "624965d8-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2016-00978"
},
{
"db": "BID",
"id": "82408"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-006885"
},
{
"db": "PACKETSTORM",
"id": "135615"
},
{
"db": "NVD",
"id": "CVE-2015-7915"
},
{
"db": "CNNVD",
"id": "CNNVD-201602-125"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2016-02-16T00:00:00",
"db": "IVD",
"id": "624965d8-2351-11e6-abef-000c29c66e3d"
},
{
"date": "2016-02-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2016-00978"
},
{
"date": "2016-02-02T00:00:00",
"db": "BID",
"id": "82408"
},
{
"date": "2016-02-24T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-006885"
},
{
"date": "2016-02-05T15:55:55",
"db": "PACKETSTORM",
"id": "135615"
},
{
"date": "2016-02-06T05:59:01.353000",
"db": "NVD",
"id": "CVE-2015-7915"
},
{
"date": "2016-02-04T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201602-125"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2016-02-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2016-00978"
},
{
"date": "2016-07-05T21:21:00",
"db": "BID",
"id": "82408"
},
{
"date": "2016-02-24T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-006885"
},
{
"date": "2016-12-03T03:13:20.900000",
"db": "NVD",
"id": "CVE-2015-7915"
},
{
"date": "2016-02-15T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201602-125"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201602-125"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Sauter moduWeb Vision Security Bypass Vulnerability",
"sources": [
{
"db": "IVD",
"id": "624965d8-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2016-00978"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201602-125"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…