CVE-2014-5396

The web interface in Schrack Technik microControl with firmware before 1.7.0 (937) has a hardcoded password of not for the "user" account, which makes it easier for remote attackers to obtain access via unspecified vectors.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2014-08-22

Last modified

2024-09-16

Affected products

• Technik Microcontrol (Schrack)
• Technik Microcontrol Firmware (Schrack)

References

• http://seclists.org/fulldisclosure/2014/Jul/40
• https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140710-2_Schrack_Technik_Microcontrol_Multiple…