Schneider Electric Quantum Ethernet模块安全漏洞
CVE编号
CVE-2011-4859利用情况
暂无补丁情况
N/A披露时间
2011-12-18漏洞描述
Schneider Electric Quantum Ethernet模块对(1) AUTCSE(2) AUT_CSE(3)fdrusers(4)ftpuser(5)loader(6)nic2212(7)nimrohs2212(8) nip2212(9)noe77111_v500(10) ntpupdate(11) pcfactory(12) sysdiag(13) target(14) test(15) USER和(16) webserver accounts使用了硬码方式输入密码，使得远程攻击者可借助(a) TELNET(b) Windriver Debug或者(c) FTP端口获取访问。解决建议
目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： http://reversemode.com/index.php?option=com_content&task=view&id=80&Itemid=1受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | m340_ethernet_module_bmxnoe0100 | * | Up to (including) 2.3 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | m340_ethernet_module_bmxnoe0110 | * | Up to (including) 4.65 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | m340_ethernet_module_bmxp342020 | * | Up to (including) 2.2 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | m340_ethernet_module_bmxp342030 | * | Up to (including) 2.2 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | premium_ethernet_module_tsxety4103 | * | Up to (including) 5.0 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | premium_ethernet_module_tsxety5103 | * | Up to (including) 5.0 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | premium_ethernet_module_tsxp57163m | * | Up to (including) 4.9 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | premium_ethernet_module_tsxp572634m | * | Up to (including) 4.9 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | premium_ethernet_module_tsxp573634m | * | Up to (including) 4.9 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | premium_ethernet_module_tsxp574634m | * | Up to (including) 3.5 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | premium_ethernet_module_tsxp575634m | * | Up to (including) 3.5 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | premium_ethernet_module_tsxp576634m | * | Up to (including) 3.5 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | quantum_ethernet_module_140cpu65150 | * | Up to (including) 3.5 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | quantum_ethernet_module_140cpu65160 | * | Up to (including) 3.5 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | quantum_ethernet_module_140cpu65260 | * | Up to (including) 3.5 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | quantum_ethernet_module_140noe77100 | * | Up to (including) 3.3 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | quantum_ethernet_module_140noe77100 | * | Up to (including) 3.4 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | quantum_ethernet_module_140noe77101 | * | Up to (including) 4.9 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | quantum_ethernet_module_140noe77111 | * | Up to (including) 5.0 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | stb_dio_ethernet_module_stbnic2212 | * | Up to (including) 2.10 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | stb_dio_ethernet_module_stbnip2212 | * | Up to (including) 2.73 | |||||
| 运行在以下环境 | |||||||||
| 应用 | schneider-electric | stb_dio_ethernet_module_stbnip2311 | * | Up to (including) 3.01 | |||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 无
- 影响范围 N/A
- 用户交互 无
- 可用性 完全地
- 保密性 完全地
- 完整性 完全地
| CWE-ID | 漏洞类型 |
| NVD-CWE-Other |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论