high8.1
CVE-2017-8894
AeroAdmin 4.1 uses an insecure protocol (HTTP) to perform software updates.
Impact
AeroAdmin 4.1 uses an insecure protocol (HTTP) to perform software updates. An attacker can hijack an update via man-in-the-middle in order to execute code in the machine.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aeroadmin | Aeroadmin | Version 4.1 |