CVE-2014-2347

EUVD-2014-2384
Amtelco miSecureMessages (aka MSM) 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:C/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
Affected Products (NVD)
VendorProductVersion
amtelcomisecuremessages
6.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://service.amtelco.com/INFINITY/MSM/MSM6.2SecurityBriefing.pdf
https://www.cisa.gov/news-events/ics-advisories/icsa-14-121-01
http://ics-cert.us-cert.gov/advisories/ICSA-14-121-01
https://service.amtelco.com/INFINITY/MSM/MSM6.2SecurityBriefing.pdf