What is CVE-2018-13789?

CVE-2018-13789 is a high-severity vulnerability in Descor Infocad Fm, classified under Improper Authentication. CVSS score: 7.5/10. Published 2018-10-10.

How severe is CVE-2018-13789?

High severity. CVSS v3 base score is 7.5 out of 10.

Auth bypass in Descor Infocad Fm

CVE-2018-13789

An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers.

Vulnerability class: Broken Authentication

EPSS: 0.012 (63.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Descor Infocad_fm
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication
CWE-294 — Authentication Bypass by Capture-replay
CWE-522 — Insufficiently Protected Credentials

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-13789?: CVE-2018-13789 is a high-severity vulnerability in Descor Infocad Fm, classified under Improper Authentication. CVSS score: 7.5/10. Published 2018-10-10.
How severe is CVE-2018-13789?: High severity. CVSS v3 base score is 7.5 out of 10.