CVE-2012-5864

Description

These Sinapsi devices do not check if users that visit pages within the device have properly authenticated. By directly visiting the pages within the device, attackers can gain unauthorized access with administrative privileges.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html
• http://www.exploit-db.com/exploits/21273/
• http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80200
• https://www.cisa.gov/news-events/ics-advisories/icsa-12-325-01
• http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html
• http://www.exploit-db.com/exploits/21273/
• http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-325-01.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80203

CWEs

CWE-287 CWE-264