NVD

Id
44695  
Name
CVE-2012-3018  
Description
The lockout-recovery feature in the Security Configurator component in ICONICS GENESIS32 9.22 and earlier and BizViz 9.22 and earlier uses an improper encryption algorithm for generation of an authentication code, which allows local users to bypass intended access restrictions and obtain administrative access by predicting a challenge response.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-07-31  
Modified Date
2012-07-31  
Seq
2012-3018  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
224266 44695 CVE-2012-3018 http://www.us-cert.gov/control_systems/pdf/ICSA-12-212-01.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27724 JVNDB-2012-003431 ICONICS GENESIS32 および BizViz におけるアクセス制限を回避される脆弱性 ICONICS GENESIS32 および BizViz の Security Configurator コンポーネント内の lockout-recovery 機能は、認証コードの生成に不適切な暗号化アルゴリズムを用いるため、アクセス制限を回避される、および管理者権限を取得される脆弱性が存在します。 CVE-2012-3018 56256 CVE-2012-3018 44695 4.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003431.html 2012-07-30 2012-08-01 View