CVE-2018-14822 Entes EMG12 versions 2.57 and prior an information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user a...
CriticalCVSS 9.8
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Entes EMG12 versions 2.57 and prior an information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user and execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| entes emg-12 firmware | <= 2.57 | No fix listed |
| entes EMG12 | = All versions prior to version 2.57 | No fix listed |
References
- 105489 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource