CVE-2013-4732
published 2013-06-30CVE-2013-4732: The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Electronics R189 One-Net EAS device through 2.0-2…
PriorityP350critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
3.04%
85.9th percentile
The administrative web server on the Digital Alert Systems DASDEC EAS device through 2.0-2 and the Monroe Electronics R189 One-Net EAS device through 2.0-2 uses predictable session ID values, which makes it easier for remote attackers to hijack sessions by sniffing the network. NOTE: VU#662676 states "Monroe Electronics could not reproduce this finding.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| digital_alert_systems | dasdec_eas | <= 2.0-2 | — |
| digital_alert_systems | dasdec_eas | — | — |
| digital_alert_systems | dasdec_eas | — | — |
| monroe_electronics | r189_one-net_eas | <= 2.0-2 | — |
| monroe_electronics | r189_one-net_eas | — | — |
| monroe_electronics | r189_one-net_eas | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdfhttp://www.kb.cert.org/vuls/id/662676http://www.kb.cert.org/vuls/id/AAMN-98MU7Hhttp://www.kb.cert.org/vuls/id/AAMN-98MUK2http://www.monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdfhttp://www.digitalalertsystems.com/pdf/130604-Monroe-Security-PR.pdfhttp://www.kb.cert.org/vuls/id/662676http://www.kb.cert.org/vuls/id/AAMN-98MU7Hhttp://www.kb.cert.org/vuls/id/AAMN-98MUK2http://www.monroe-electronics.com/MONROE_ELECTRONICS_PDF/130604-Monroe-Security-PR.pdf
2013-06-30
Published