Vulnerability Details CVE-2017-13992
An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation for the web interface authentication mechanism, which could allow remote code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.138
EPSS Ranking 94.0%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 6.8
References
Products affected by CVE-2017-13992
-
cpe:2.3:h:loytec:lvis-3me:-
-
cpe:2.3:o:loytec:lvis-3me_firmware:6.1.1