8.8
CVSSv3

CVE-2019-7280

Published: 01/07/2019 Updated: 25/10/2022
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

Prima Systems FlexAir, Versions 2.3.38 and prior. The session-ID is of an insufficient length and can be exploited by brute force, which may allow a remote malicious user to obtain a valid session and bypass authentication.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

primasystems flexair