漏洞描述
Socomec DIRIS A-40 devices before 48250501 are susceptible to a password disclosure vulnerability in the web interface that could allow remote attackers to get full access to a device via the /password.jsn URI.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
seclists.orghttps://seclists.org/fulldisclosure/2019/Oct/10↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2019-15859↗packetstormsecurity.comhttp://packetstormsecurity.com/files/154764/Socomec-DIRIS-A-40-Password-Disclosure.html↗www.socomec.comhttps://www.socomec.com/single-circuit-multifunction-meters_en.html↗seclists.orghttp://seclists.org/fulldisclosure/2019/Oct/10↗