CVE-2019-11367

CRITICO 9.8CVE-2019-11367 · Published 03/06/2019 · updated 17/06/2026

In breve

CVE-2019-11367 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda solar data recorder (auo).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.8%, superiore al 86.6% delle vulnerabilità.
Correzione: aggiornare a 1.3.0 o successiva.

Package	Affected versions	Patched versions
solar data recorder auo	`< 1.3.0`	`1.3.0`

Description

An issue was discovered in AUO Solar Data Recorder before 1.3.0. The web portal uses HTTP Basic Authentication and provides the account and password in the WWW-Authenticate attribute. By using this account and password, anyone can login successfully.

References

packetstormsecurity.com/files/153151/AUO-Solar-Data-Recorder-Incorrect-Access-Control.html · Exploit
drive.google.com/file/d/1H1L5s14Omnx1eJAdRlRninnqUKLJ_xDA/view · Exploit
nepenthe0320/cve_poc · Exploit

Altre vulnerabilità di solar data recorder

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free