Tec4Data SmartCooler, all versions prior to firmware 180806, the device responds to a remote unauthenticated reboot command that may be used to perform a denial of service attack.
References
Link | Resource |
---|---|
https://ics-cert.us-cert.gov/advisories/ICSA-18-263-01 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2018-09-20 12:29
Updated : 2019-10-09 16:35
NVD link : CVE-2018-14796
Mitre link : CVE-2018-14796
JSON object : View
CWE
CWE-306
Missing Authentication for Critical Function
Products Affected
tec4data
- smartcooler
- smartcooler_firmware