CVE-2013-4734

Published Jun 30, 2013

Last updated 11 years ago

Overview

Description: dasdec_mkuser on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 generates predictable passwords, which might make it easier for attackers to obtain non-administrative access via unspecified vectors.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:digital_alert_systems:dasdec_eas:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4A5A9D54-20F6-4791-A830-3E6635A18933",
            "versionEndIncluding": "2.0-1"
          },
          {
            "criteria": "cpe:2.3:h:digital_alert_systems:dasdec_eas:2.0-0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "308B32AD-1091-4528-964B-7394D54B1D4E"
          },
          {
            "criteria": "cpe:2.3:h:monroe_electronics:r189_one-net_eas:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0AC044FA-0BC2-43D4-BF32-9B6FD67B8E77",
            "versionEndIncluding": "2.0-1"
          },
          {
            "criteria": "cpe:2.3:h:monroe_electronics:r189_one-net_eas:2.0-0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "90C5BDD8-C91B-44EB-870E-FABEFCFA5F7B"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References