The Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity protection, which makes it easier for man-in-the-middle attackers to (1) initiate a false alarm or (2) deactivate an alarm by modifying the client-server data stream.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: certcc
Published: 2015-12-27T02:00:00
Updated: 2024-08-06T08:13:31.754Z
Reserved: 2015-11-19T00:00:00
Link: CVE-2015-8254
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2015-12-27T03:59:04.037
Modified: 2015-12-28T21:43:02.643
Link: CVE-2015-8254
Redhat
No data.