critical9.8Public exploit code
CVE-2014-5381
Grand MA 300 allows a brute-force attack on the PIN.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Granding MA300 - Weak Pin Encryption Brute Force2014-08-26 · remote · multiple · Verified
Impact
Grand MA 300 allows a brute-force attack on the PIN.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Granding | Grand Ma300 Firmware | Version 6.60 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/128003/Grand-MA-300-Fingerprint-Reader-Weak-PIN-Verification.html
- http://seclists.org/fulldisclosure/2014/Aug/70
- http://www.securityfocus.com/bid/69390
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95485
- http://packetstormsecurity.com/files/128003/Grand-MA-300-Fingerprint-Reader-Weak-PIN-Verification.html
- http://seclists.org/fulldisclosure/2014/Aug/70
- http://www.securityfocus.com/bid/69390
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95485