Publié par : pintejp | décembre 9, 2015

Flaws in industrial gas detectors exploitable by low-skilled attackers

Two industrial gas detector product lines manufactured by Honeywell sport two remotely exploitable vulnerabilities that can allow an attacker to retrieve the user’s password and to bypass the authentication process.

The latter capability would permit the attacker to gain access to the device, to make unauthorized configuration changes, and to start the calibration or test processes.

http://www.net-security.org/secworld.php?id=19204


Laisser un commentaire

Catégories