CVE-2014-9303 EntryPass N5200 Active Network Control Panel allows remote attackers to read device memory and obtain the administrator username and password via a URL starting with an ASCII character o through z or....
HighCVSS 7.8
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EntryPass N5200 Active Network Control Panel allows remote attackers to read device memory and obtain the administrator username and password via a URL starting with an ASCII character o through z or A through D, different vectors than CVE-2014-8868.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| entrypass n5200 active network control panel | All versions | No fix listed |
References
- 20141201 [RT-SA-2014-011] EntryPass N5200 Credentials Disclosure exploit mailing-list
- 20141201 [RT-SA-2014-011] EntryPass N5200 Credentials Disclosure mailing-list
- www.redteam-pentesting.de exploit