Skip to content

CVE-2015-6033 Qolsys IQ Panel (aka QOL) before 1.5.1 does not verify the digital signatures of software updates, which allows man-in-the-middle attackers to bypass intended access restrictions via a modified update...

HighCVSS 9.3 EPSS 2.4%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Qolsys IQ Panel (aka QOL) before 1.5.1 does not verify the digital signatures of software updates, which allows man-in-the-middle attackers to bypass intended access restrictions via a modified update.

Affected products

ProductAffected versionsFixed in
qolsys iq panel <= 1.5.0 No fix listed

References

  • VU#573848 third-party-advisory us-government-resource