Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code by leveraging knowledge of a key from a different installation.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/573848 | Third Party Advisory US Government Resource |
Configurations
Information
Published : 2015-10-30 21:59
Updated : 2015-11-02 10:26
NVD link : CVE-2015-6032
Mitre link : CVE-2015-6032
JSON object : View
CWE
CWE-255
Credentials Management Errors
Products Affected
qolsys
- iq_panel