Vulnerability Description
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. The default management application is delivered over cleartext HTTP with Basic Authentication, as demonstrated by the /admin/index.html URI.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mobotix | S14 Firmware | mx-v4.2.1.61 |
| Mobotix | S14 | - |
Related Weaknesses (CWE)
References
- https://gist.github.com/llandeilocymro/7dbe3daaab6d058d609fd9a0b24301cbExploitThird Party Advisory
- https://gist.github.com/llandeilocymro/7dbe3daaab6d058d609fd9a0b24301cbExploitThird Party Advisory
FAQ
What is CVE-2019-7675?
CVE-2019-7675 is a vulnerability with a CVSS score of 7.5 (HIGH). An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. The default management application is delivered over cleartext HTTP with Basic Authentication, as demonstrated by the /admin/index.html URI...
How severe is CVE-2019-7675?
CVE-2019-7675 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-7675?
Check the references section above for vendor advisories and patch information. Affected products include: Mobotix S14 Firmware, Mobotix S14.