CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-13352

WolfVision Cynap before 1.30j uses a static, hard-coded cryptographic secret for generating support PINs for the 'forgot password' feature. By knowing this static secret and the corresponding algorithm for calculating support PINs, an attacker can reset the ADMIN password and thus gain remote access.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 76.5%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 10.0

References

Products affected by CVE-2019-13352

Wolfvision » Cynap » Version: 1.06

cpe:2.3:a:wolfvision:cynap:1.06
Wolfvision » Cynap » Version: 1.08g

cpe:2.3:a:wolfvision:cynap:1.08g
Wolfvision » Cynap » Version: 1.10i

cpe:2.3:a:wolfvision:cynap:1.10i
Wolfvision » Cynap » Version: 1.14

cpe:2.3:a:wolfvision:cynap:1.14
Wolfvision » Cynap » Version: 1.15e

cpe:2.3:a:wolfvision:cynap:1.15e
Wolfvision » Cynap » Version: 1.16g

cpe:2.3:a:wolfvision:cynap:1.16g
Wolfvision » Cynap » Version: 1.18

cpe:2.3:a:wolfvision:cynap:1.18
Wolfvision » Cynap » Version: 1.18g

cpe:2.3:a:wolfvision:cynap:1.18g
Wolfvision » Cynap » Version: 1.19d

cpe:2.3:a:wolfvision:cynap:1.19d
Wolfvision » Cynap » Version: 1.20

cpe:2.3:a:wolfvision:cynap:1.20
Wolfvision » Cynap » Version: 1.20i

cpe:2.3:a:wolfvision:cynap:1.20i
Wolfvision » Cynap » Version: 1.21

cpe:2.3:a:wolfvision:cynap:1.21
Wolfvision » Cynap » Version: 1.22

cpe:2.3:a:wolfvision:cynap:1.22
Wolfvision » Cynap » Version: 1.24

cpe:2.3:a:wolfvision:cynap:1.24
Wolfvision » Cynap » Version: 1.26g

cpe:2.3:a:wolfvision:cynap:1.26g
Wolfvision » Cynap » Version: 1.28

cpe:2.3:a:wolfvision:cynap:1.28
Wolfvision » Cynap » Version: 1.28j

cpe:2.3:a:wolfvision:cynap:1.28j

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-13352

Products

Pricing

Contact Us