Posted by Harsha Bhat on Mar 08

Title: Missing access controls
Product: Emerson Smart Wireless Gateway
Vendor Homepage: http://emerson.com
Vulnerable Version: 1420 4.6.59
CVE Number: CVE-2020-19419
Authors: Harsha Bhat, Anish Mitra and Unmesh Guragol
Timeline:
2019-08-02 Disclosed to the vendor
2019-08-22 Vendor confirmed that the vulnerability was identified
internally and a fix was released in the latest version of firmware

1. Vulnerability Description

Incorrect Access…
– Read More – Full Disclosure