首页 AI 资讯 技术前沿 KnowSafe 安全预警:Teracue ENC-400 - Command Injection / Missing Authentication
技术前沿

KnowSafe 安全预警:Teracue ENC-400 - Command Injection / Missing Authentication

KnowSafe 安全预警:KnowSafe 安全团队监测到编号 AVD-2018-20219 的安全漏洞(危害等级:高危)已公开披露,相关用户应尽快排查并完成修复。

漏洞介绍

Multiple vulnerabilities were identified within the Teracue ENC-400,

including pre-authenticated remote code authentication. While the vendor

has released updated firmware after these issues were identified, they are

not all resolved with the latest version of the firmware.

影响范围

系统:teracue enc-400_hdmi2_firmware(影响面 Up to (including) 2.56)

系统:teracue enc-400_hdmi_firmware(影响面 Up to (including) 2.56)

系统:teracue enc-400_hdsdi_firmware(影响面 Up to (including) 2.56)

硬件:teracue enc-400_hdmi(版本 -)

硬件:teracue enc-400_hdmi2(版本 -)

硬件:teracue enc-400_hdsdi(版本 -)

解决方案

升级至v2.57版本。

参考信息

http://packetstormsecurity.com/files/151802/Teracue-ENC-400-Command-Injection-Missing-Authentication.html

http://seclists.org/fulldisclosure/2019/Feb/48

https://zxsecurity.co.nz/research.html

KnowSafe 将持续跟踪该漏洞的利用情况与修复进展,如需漏洞管理与应急响应支持,欢迎联系 KnowSafe 安全团队。