EntryPass N5200 Active Network Control Panel does not properly restrict access, which allows remote attackers to obtain the administrator username and password, and possibly other sensitive information, via a request to /4.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| N5200_active_network_control_panel | Entrypass | - (including) | - (including) |
References
- http://seclists.org/fulldisclosure/2014/Dec/2
- http://www.securityfocus.com/archive/1/534128/100/0/threaded
- https://www.redteam-pentesting.de/advisories/rt-sa-2014-011
- http://seclists.org/fulldisclosure/2014/Dec/2
- http://www.securityfocus.com/archive/1/534128/100/0/threaded
- https://www.redteam-pentesting.de/advisories/rt-sa-2014-011