ICS Prisma Industriale Checkweigher PrismaWEB 1.21 Hard-coded Credentials (CVE-2018-9161)

Rule ID

1238569

Severity

Critical

Description

Prisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discover the hardcoded prisma password for the prismaweb account by reading user/scripts/login_par.js.

Impact

Privilege escalation

Recommendation

Update vendor's patch.

IPS Category

ICS threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A