WebAccess/NMS (Versions prior to v3.0.3_Build6299) has an improper authentication vulnerability, which may allow unauthorized users to view resources monitored and controlled by the WebAccess/NMS, as well as IP addresses and names of all the devices managed via WebAccess/NMS.
References
| Link | Resource |
|---|---|
| https://us-cert.cisa.gov/ics/advisories/icsa-21-229-02 | Patch Third Party Advisory US Government Resource |
| https://us-cert.cisa.gov/ics/advisories/icsa-21-229-02 | Patch Third Party Advisory US Government Resource |
Configurations
History
21 Nov 2024, 06:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://us-cert.cisa.gov/ics/advisories/icsa-21-229-02 - Patch, Third Party Advisory, US Government Resource |
29 Oct 2021, 01:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-287 | |
| CPE | cpe:2.3:a:advantech:webaccess\/nms:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 5.3 |
| References | (MISC) https://us-cert.cisa.gov/ics/advisories/icsa-21-229-02 - Patch, Third Party Advisory, US Government Resource |
27 Oct 2021, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-10-27 01:15
Updated : 2024-11-21 06:07
NVD link : CVE-2021-32951
Mitre link : CVE-2021-32951
CVE.ORG link : CVE-2021-32951
JSON object : View
Products Affected
advantech
- webaccess\/nms
CWE
CWE-287
Improper Authentication