In VOS compromised, an attacker at network endpoints can possibly view communications between an unsuspecting user and the service using man-in-the-middle attacks. Usage of unapproved SSH encryption protocols or cipher suites also violates the Data Protection TSR (Technical Security Requirements).
References
Link | Resource |
---|---|
https://hackerone.com/reports/1168196 | Third Party Advisory |
Configurations
Information
Published : 2021-05-26 12:15
Updated : 2021-06-07 07:13
NVD link : CVE-2018-16499
Mitre link : CVE-2018-16499
JSON object : View
CWE
CWE-326
Inadequate Encryption Strength
Products Affected
versa-networks
- versa_operating_system