CVE-2019-7674

An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices

published February 9, 2019

CVSS
—
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

⚠️ You can set a password of "aaaaa" on your MOBOTIX S14 devices — and that’s a problem! 🔑 Think of it like leaving your front door wide open with just a flimsy piece of plastic for a lock. It looks like it has some security, but anyone with a little motivation can just walk right in. If someone manages to exploit this issue, they could gain unauthorized access to sensitive information or control over the device. With an easily guessable password, it could lead to complete compromise, leaving your system vulnerable to all sorts of mischief.

Put simply

Think of it like leaving your front door wide open with just a flimsy piece of plastic for a lock. It looks like it has some security, but anyone with a little motivation can just walk right in. This vulnerability allows users to set a notoriously weak password ('aaaaa') for the admin access on MOBOTIX S14 MX-V4.2.1.61 devices, which may not protect against unauthorized access effectively.

What to do

If someone manages to exploit this issue, they could gain unauthorized access to sensitive information or control over the device. With an easily guessable password, it could lead to complete compromise, leaving your system vulnerable to all sorts of mischief. To secure your devices, immediately change the admin password to a stronger, more complex one. Regularly audit your device settings to ensure compliance with security best practices and keep your firmware up to date. You've got this! Strengthening your passwords is an easy win for enhanced security! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01345 · 71.2th percentile
Published
2019-02-09T22:00Z
EPSS history
Timeline
  • 09 FEB 22:00Z
    An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices
    cvelistv5