critical9.8Public exploit code
CVE-2019-6814
A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiali…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Schneider Electric Pelco Endura NET55XX Encoder - Authentication Bypass (Metasploit)2019-07-29 · remote · unix · Verified
Impact
A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker crafts a malicious request to the encoder webUI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Net5501 Firmware | before 2.1.9.7 |
| Schneider-Electric | Net5501-I Firmware | before 2.1.9.7 |
| Schneider-Electric | Net5501-Xt Firmware | before 2.1.9.7 |
| Schneider-Electric | Net5504 Firmware | before 2.1.9.7 |
| Schneider-Electric | Net5500 Firmware | before 2.1.9.7 |
| Schneider-Electric | Net5516 Firmware | before 2.1.9.7 |
| Schneider-Electric | Net5508 Firmware | before 2.1.9.7 |