Information disclosure in Entrypass N5200 Active Network Control Panel
CVE-2014-9303
EntryPass N5200 Active Network Control Panel allows remote attackers to read device memory and obtain the administrator username and password via a URL starting with an ASCII character o through z or A through D, different vectors than CVE-2014-8868.
Vulnerability class: Information Disclosure
EPSS: 0.033 (87.3th percentile) — read the EPSS interpretation.
Affected products
- Entrypass N5200_active_network_control_panel
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)