#VU22452 Missing Authorization in WISE-PaaS/RMM - CVE-2019-13547
Published: November 1, 2019
Vulnerability identifier: #VU22452
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2019-13547
CWE-ID: CWE-862
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
WISE-PaaS/RMM
WISE-PaaS/RMM
Software vendor:
Advantech Co., Ltd
Advantech Co., Ltd
Description
The vulnerability allows a remote attacker to bypass security restrictions on the target system.
The vulnerability exists due to the an unsecured function. A remote attacker can access the IP address, use the function without authentication and gain access to the target system.
Remediation
Vendor recommends to update to new EdgeSense and DeviceOn software bundles.