9.8
CVSSv3

CVE-2018-15534

Published: 21/08/2018 Updated: 15/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Geutebrueck re_porter 16 prior to 7.8.974.20 has a possibility of unauthenticated access to sensitive information including usernames and hashes via a direct request for /statistics/gscsetup.xml on TCP port 12003.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

geutebrueck re_porter_16_firmware

Vendor Advisories

Check Point Reference: CPAI-2018-2718 Date Published: 20 Mar 2024 Severity: Critical ...

Exploits

# Exploit Title: Geutebrueck re_porter 7897420 - Credential Disclosure # Date: 2018-08-03 # Exploit Author: Kamil Suska # Vendor: wwwgeutebrueckcom/en_UShtml # Link: wwwsourcesecuritycom/geutebruck-re-porter-16-technical-detailshtml # Version: prior 7897420 # CVE-2018-15534 # PoC GET /statistics/gscsetupxml HTTP/11 H ...
Geutebruck re_porter 16 versions prior to 7897420 suffer from a credential disclosure vulnerability ...