Vulnerabilities > CVE-2001-1341 - Information Disclosure vulnerability in Beck IPC GmbH IPC@CHIP Network

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
beck-ipc-gmbh
exploit available
NVD
Published: 2001-05-24
Updated: 2008-09-10

Summary

The Beck GmbH IPC@Chip embedded web server installs the chipcfg.cgi program by default, which allows remote attackers to obtain sensitive network information via a request to the program.

Vulnerable Configurations

Part Description Count
Application
Beck_Ipc_Gmbh
1

Exploit-Db

descriptionSolare Datensysteme Solar-Log Devices 2.8.4-56 / 3.5.2-85 - Multiple Vulnerabilities. Webapps exploit for Hardware platform. Tags: Cross-Site Request Forgery...
idEDB-ID:41671
last seen2017-03-22
modified2017-03-22
published2017-03-22
reporterExploit-DB
sourcehttps://www.exploit-db.com/download/41671/
titleSolare Datensysteme Solar-Log Devices 2.8.4-56 / 3.5.2-85 - Multiple Vulnerabilities

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/141757/SA-20170322-0.txt
idPACKETSTORM:141757
last seen2017-03-22
published2017-03-22
reporterT. Weber
sourcehttps://packetstormsecurity.com/files/141757/Solar-Log-CSRF-Information-Disclosure-DoS-File-Upload.html
titleSolar-Log CSRF / Information Disclosure / DoS / File Upload

References