CVE-2019-6814 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2019-6814

Analyzed

More Info Official Page

Source-cybersecurity@se.com

Published At-22 May, 2019 | 20:29

Updated At-03 Sep, 2022 | 03:47

A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker crafts a malicious request to the encoder webUI.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Schneider Electric SE

>>net5501_firmware>>Versions before 2.1.9.7(exclusive)

cpe:2.3:o:schneider-electric:net5501_firmware:*:*:*:*:*:*:*:*

Schneider Electric SE

cpe:2.3:h:schneider-electric:net5501:-:*:*:*:*:*:*:*

Schneider Electric SE

>>net5501-i_firmware>>Versions before 2.1.9.7(exclusive)

cpe:2.3:o:schneider-electric:net5501-i_firmware:*:*:*:*:*:*:*:*

Schneider Electric SE

cpe:2.3:h:schneider-electric:net5501-i:-:*:*:*:*:*:*:*

Schneider Electric SE

>>net5501-xt_firmware>>Versions before 2.1.9.7(exclusive)

cpe:2.3:o:schneider-electric:net5501-xt_firmware:*:*:*:*:*:*:*:*

Schneider Electric SE

>>net5501-xt>>-

cpe:2.3:h:schneider-electric:net5501-xt:-:*:*:*:*:*:*:*

Schneider Electric SE

>>net5504_firmware>>Versions before 2.1.9.7(exclusive)

cpe:2.3:o:schneider-electric:net5504_firmware:*:*:*:*:*:*:*:*

Schneider Electric SE

cpe:2.3:h:schneider-electric:net5504:-:*:*:*:*:*:*:*

Schneider Electric SE

>>net5500_firmware>>Versions before 2.1.9.7(exclusive)

cpe:2.3:o:schneider-electric:net5500_firmware:*:*:*:*:*:*:*:*

Schneider Electric SE

cpe:2.3:h:schneider-electric:net5500:-:*:*:*:*:*:*:*

Schneider Electric SE

>>net5516_firmware>>Versions before 2.1.9.7(exclusive)

cpe:2.3:o:schneider-electric:net5516_firmware:*:*:*:*:*:*:*:*

Schneider Electric SE

cpe:2.3:h:schneider-electric:net5516:-:*:*:*:*:*:*:*

Schneider Electric SE

>>net5508_firmware>>Versions before 2.1.9.7(exclusive)

cpe:2.3:o:schneider-electric:net5508_firmware:*:*:*:*:*:*:*:*

Schneider Electric SE

cpe:2.3:h:schneider-electric:net5508:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-287	Primary	nvd@nist.gov
CWE-287	Secondary	cybersecurity@se.com

References

Hyperlink	Source	Resource
https://www.se.com/ww/en/download/document/SEVD-2019-134-01/	cybersecurity@se.com	Vendor Advisory