CVE-2015-7911
9.1
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 3.9 / Impact: 5.2
Source: NVD
Description
Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices before 1.24.50 and PCD3.T665 and PCD3.T666 devices before 1.24.41 have hardcoded credentials, which allows remote attackers to obtain administrative access via an FTP session.
Affected (14)
Products: Saia Burgess Controls: Pcd7.d4xxv Vga Mb Firmware, Pcd7.d4xxd Firmware, Pcd3.mxxx0 Firmware, Pcd7.d4xxd Svga Mb Firmware, Pcd3.t666 Firmware, Pcd1.m2xx0 Firmware, Pcd3.mxx60 Firmware, Pcd3.t665 Firmware, Pcd2.m5xx0 Firmware, Pcd7.d4xxwtpf Wvga Mb Firmware, Pcd7.d4xxwtpf Firmware, Pcd1.m0xx0 Firmware, Pcd7.d4xxxt5f Firmware, Pcd7.d4xxv Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.24.41 |
| Running on/with | Platform Versions |
|---|---|
Saia Burgess Controls Pcd7.d4xxv Vga Mb | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.24.41 |
| Running on/with | Platform Versions |
|---|---|
Saia Burgess Controls Pcd7.d4xxd | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.24.25 |
| Running on/with | Platform Versions |
|---|---|
Saia Burgess Controls Pcd3.mxxx0 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.24.41 |
| Running on/with | Platform Versions |
|---|---|
Saia Burgess Controls Pcd7.d4xxd Svga Mb | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.24.30 |
| Running on/with | Platform Versions |
|---|---|
Saia Burgess Controls Pcd3.t666 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.24.25 |
| Running on/with | Platform Versions |
|---|---|
Saia Burgess Controls Pcd1.m2xx0 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.24.25 |
| Running on/with | Platform Versions |
|---|---|
Saia Burgess Controls Pcd3.mxx60 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.24.30 |
| Running on/with | Platform Versions |
|---|---|
Saia Burgess Controls Pcd3.t665 | Up to - |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.24.25 |
| Running on/with | Platform Versions |
|---|---|
Saia Burgess Controls Pcd2.m5xx0 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.24.41 |
| Running on/with | Platform Versions |
|---|---|
Saia Burgess Controls Pcd7.d4xxwtpf Wvga Mb | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.24.41 |
| Running on/with | Platform Versions |
|---|---|
Saia Burgess Controls Pcd7.d4xxwtpf | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.24.25 |
| Running on/with | Platform Versions |
|---|---|
Saia Burgess Controls Pcd1.m0xx0 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.24.41 |
| Running on/with | Platform Versions |
|---|---|
Saia Burgess Controls Pcd7.d4xxxt5f | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.24.41 |
| Running on/with | Platform Versions |
|---|---|
Saia Burgess Controls Pcd7.d4xxv | All versions |
Related CWEs
References (2)
Source: ics-cert@hq.dhs.gov
PatchThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party AdvisoryUS Government Resource
Timeline
No history available yet.