Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on the client to implement access control, which allows remote attackers to perform administrative actions via modified JavaScript code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Advantech/B+B SmartWorx VESP211-EU和VESP211-232 安全漏洞
Vulnerability Description
Advantech/B+B SmartWorx VESP211-EU和VESP211-232都是研华（Advantech）公司的用于将串口设备连接到以太网的接口。 Advantech/B+B SmartWorx VESP211-EU和VESP211-232的Web界面中存在安全漏洞，该漏洞源于程序依赖客户端实现访问控制。远程攻击者可借助修改的密码利用该漏洞执行管理员操作。以下产品及版本受到影响：使用1.7.2固件的Advantech/B+B SmartWorx VESP211-EU，使用1.5.1版本和1
CVSS Information
N/A
Vulnerability Type
N/A