Vulnerability in Digital_alert_systems Dasdec_eas
CVE-2013-4734
dasdec_mkuser on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 generates predictable passwords, which might make it easier for attackers to obtain non-administrativ…
EPSS: 0.038 (88.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
Affected products
- Digital_alert_systems Dasdec_eas — versions 2.0-0
- Monroe_electronics R189_one-net_eas — versions 2.0-0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, US Government Resource)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, US Government Resource)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2013-4734?
- CVE-2013-4734 is a high-severity vulnerability in Digital_alert_systems Dasdec_eas, classified under Use of Insufficiently Random Values. CVSS score: 7.3/10. Published 2013-06-30.
- How severe is CVE-2013-4734?
- High severity. CVSS v3 base score is 7.3 out of 10.