CVE-2019-9105

The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to make several types of API calls…

published May 31, 2019

CVSS
—
EPSS
2%
Percentile
83.8
In the wild
Unconfirmed
What it is

The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to make several types of API calls without authentication, as demonstrated by retrieving password hashes via an inc/utils/REST_API.php?command=CallAPI&customurl=alladminusers call.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02397 · 83.8th percentile
Published
2019-05-31T21:21Z
EPSS history
Timeline
  • 31 MAY 21:21Z
    The WebApp v04.68 in the supervisor on SAET Impianti Speciali TEBE Small 05.01 build 1137 devices allows remote attackers to make several types of API calls…
    cvelistv5