CVE-2014-9303

EntryPass N5200 Active Network Control Panel allows remote attackers to read device memory and obtain the administrator username and password via a URL starting with an ASCII character o through z or A through D, different vectors than CVE-2014-8868.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2014-12-07

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• N5200 Active Network Control Panel (Entrypass)

References

• http://seclists.org/fulldisclosure/2014/Dec/2
• http://www.securityfocus.com/archive/1/534128/100/0/threaded
• https://www.redteam-pentesting.de/advisories/rt-sa-2014-011