We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea
| Reserved: | 2023-08-02 |
| Published: | 2023-09-19 |
| Updated: | 2023-09-19 |
Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow an attacker to perform a brute force attack on the emailed PIN number in order to change the password of a legitimate user.
| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L |
CWE VIEW: Deprecated Entries
Pablo Arias Rodriguez and Jorge Alberto Palma Reyes, members of CSIRT-CV
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea
