CVE-2018-6624

EUVD-2018-18371
OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific screen, as demonstrated by monitor.html.
Forced Browsing
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
Affected Products (NVD)
VendorProductVersion
omronns_series_firmware
1.1 ≤
𝑥
≤ 1.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://misteralfa-hack.blogspot.cl/2018/02/otomron-login-bypass.html
http://misteralfa-hack.blogspot.cl/2018/02/otomron-login-bypass.html