CVE-2018-6624 OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific screen, as demonstrated by monitor.html.
CriticalCVSS 9.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific screen, as demonstrated by monitor.html.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| omron ns series firmware | >= 1.1, <= 1.3 | No fix listed |
References
- misteralfa-hack.blogspot.cl third-party-advisory