Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Insufficiently Protected Credentials in Radiometrics VizAir
Vulnerability Description
Radiometrics VizAir is vulnerable to exposure of the system's REST API key through a publicly accessible configuration file. This allows attackers to remotely alter weather data and configurations, automate attacks against multiple instances, and extract sensitive meteorological data, which could potentially compromise airport operations. Additionally, attackers could flood the system with false alerts, leading to a denial-of-service condition and significant disruption to airport operations. Unauthorized remote control over aviation weather monitoring and data manipulation could result in incorrect flight planning and hazardous takeoff and landing conditions.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
不充分的凭证保护机制
Vulnerability Title
Radiometrics VizAir 安全漏洞
Vulnerability Description
Radiometrics VizAir是美国Radiometrics公司的一个气象监测与预警系统。 Radiometrics VizAir存在安全漏洞，该漏洞源于公开可访问的配置文件暴露了系统的REST API密钥，可能导致天气数据和配置被远程篡改、自动化攻击多个实例以及敏感气象数据泄露，进而影响机场运营。
CVSS Information
N/A
Vulnerability Type
N/A