{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2018-02-05T00:00:00", "descriptions": [{"lang": "en", "value": "OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific screen, as demonstrated by monitor.html."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-02-05T17:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://misteralfa-hack.blogspot.cl/2018/02/otomron-login-bypass.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2018-6624", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific screen, as demonstrated by monitor.html."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://misteralfa-hack.blogspot.cl/2018/02/otomron-login-bypass.html", "refsource": "MISC", "url": "http://misteralfa-hack.blogspot.cl/2018/02/otomron-login-bypass.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T06:10:10.643Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://misteralfa-hack.blogspot.cl/2018/02/otomron-login-bypass.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2018-6624", "datePublished": "2018-02-05T18:00:00", "dateReserved": "2018-02-05T00:00:00", "dateUpdated": "2024-08-05T06:10:10.643Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:omron:ns_series_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1EF95403-DE01-4ABF-B877-6EC88268FCDC", "versionEndIncluding": "1.3", "versionStartIncluding": "1.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:omron:ns10:-:*:*:*:*:*:*:*", "matchCriteriaId": "1D65A565-79CF-48F7-89AA-B25D4126BC30", "vulnerable": false}, {"criteria": "cpe:2.3:h:omron:ns12:-:*:*:*:*:*:*:*", "matchCriteriaId": "D5C66177-8822-4330-AB4E-0D18C06B4889", "vulnerable": false}, {"criteria": "cpe:2.3:h:omron:ns15:-:*:*:*:*:*:*:*", "matchCriteriaId": "1ADD9BA5-F03C-4B69-A088-A46C08C90DC4", "vulnerable": false}, {"criteria": "cpe:2.3:h:omron:ns5:-:*:*:*:*:*:*:*", "matchCriteriaId": "095B49B3-A9A3-448A-B07B-7921285920B7", "vulnerable": false}, {"criteria": "cpe:2.3:h:omron:ns8:-:*:*:*:*:*:*:*", "matchCriteriaId": "360BDC8D-811F-4F63-9FFC-A81C6617D376", "vulnerable": false}, {"criteria": "cpe:2.3:h:omron:nsh5:-:*:*:*:*:*:*:*", "matchCriteriaId": "F131D0DE-3CD9-4EFF-9D0E-8B6A896DEA9F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific screen, as demonstrated by monitor.html."}, {"lang": "es", "value": "Los dispositivos OMRON NS desde la versi\u00f3n 1.1 hasta la 1.3 permite que los atacantes remotos omitan la autenticaci\u00f3n mediante una petici\u00f3n directa al archivo .html para una pantalla espec\u00edfica, tal y como queda demostrado en monitor.html."}], "id": "CVE-2018-6624", "lastModified": "2019-10-03T00:03:26.223", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-02-05T18:29:00.390", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://misteralfa-hack.blogspot.cl/2018/02/otomron-login-bypass.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-425"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}