CVE-2015-7911
Critical
Description
Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices before 1.24.50 and PCD3.T665 and PCD3.T666 devices before 1.24.41 have hardcoded credentials, which allows remote attackers to obtain administrative access via an FTP session.
SeverityCritical
CVSS9.1
Exploit probability—
ProductSaia Burgess Controls Pcd7.d4xxv Vga Mb Firmware
PublishedDec 23, 2015
First seenDec 23, 2015
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| saia_burgess_controls pcd7.d4xxv_vga_mb_firmware | v ≤ 1.24.41 | — |
| saia_burgess_controls pcd7.d4xxd_firmware | v ≤ 1.24.41 | — |
| saia_burgess_controls pcd3.mxxx0_firmware | v ≤ 1.24.25 | — |
| saia_burgess_controls pcd7.d4xxd_svga_mb_firmware | v ≤ 1.24.41 | — |
| saia_burgess_controls pcd3.t666_firmware | v ≤ 1.24.30 | — |
| saia_burgess_controls pcd1.m2xx0_firmware | v ≤ 1.24.25 | — |
| saia_burgess_controls pcd3.mxx60_firmware | v ≤ 1.24.25 | — |
| saia_burgess_controls pcd3.t665_firmware | v ≤ 1.24.30 | — |
| saia_burgess_controls pcd2.m5xx0_firmware | v ≤ 1.24.25 | — |
| saia_burgess_controls pcd7.d4xxwtpf_wvga_mb_firmware | 1.24.41 | — |
| saia_burgess_controls pcd7.d4xxwtpf_firmware | v ≤ 1.24.41 | — |
| saia_burgess_controls pcd1.m0xx0_firmware | v ≤ 1.24.25 | — |
| saia_burgess_controls pcd7.d4xxxt5f_firmware | v ≤ 1.24.41 | — |
| saia_burgess_controls pcd7.d4xxv_firmware | v ≤ 1.24.41 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.