CVE-2018-9031 Information

Description

The login interface on TNLSoftSolutions Sentry Vision 3.x devices provides password disclosure by reading an \if(pwd ==\ line in the HTML source code. This means in effect that authentication occurs only on the client side.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Reference

https://gist.github.com/pabloonicarres/c2c284ca7b025d629da39087445ed15dfile-sentryvision_authentication_bypass-sh https://www.youtube.com/watch?v=pLMH9vGPRCo

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

9.8