CVE-2019-12804
10.07.2019, 20:15
In Hunesion i-oneNet version 3.0.7 ~ 3.0.53 and 4.0.4 ~ 4.0.16, due to the lack of update file integrity checking in the upgrade process, an attacker can craft malicious file and use it as an update.Enginsight
| Vendor | Product | Version |
|---|---|---|
| hunesion | i-onenet | 3.0.7 ≤ 𝑥 ≤ 3.0.53 |
| hunesion | i-onenet | 4.0.4 ≤ 𝑥 ≤ 4.0.16 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-353 - Missing Support for Integrity CheckThe software uses a transmission protocol that does not include a mechanism for verifying the integrity of the data during transmission, such as a checksum.
- CWE-345 - Insufficient Verification of Data AuthenticityThe software does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.