1 results (0.003 seconds)

CVSS: 10.0EPSS: 1%CPEs: 10EXPL: 0

13 Feb 2009 — GE Fanuc iFIX 5.0 and earlier relies on client-side authentication involving a weakly encrypted local password file, which allows remote attackers to bypass intended access restrictions and start privileged server login sessions by recovering a password or by using a modified program module. GE Fanuc iFIX v5.0 y versiones anteriores utiliza una autenticación en el lado del cliente que involucra a un fichero de contraseña local con un cifrado débil, permite a atacantes remotos saltarse las restricciones de a... • http://support.gefanuc.com/support/index?page=kbchannel&id=S:KB13253&actp=search • CWE-255: Credentials Management Errors •