ICSA-22-104-03 Red Lion DA50N

The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be accessed via SSH or Telnet, the former of which is by default enabled on trusted interfaces. While the SSH service does not support root login, a user logging in using either of the other Linux accounts may elevate to root access using the su command if they have access to the associated password.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

弱口令要求

Red Lion DA50N 安全漏洞

Red Lion DA50N是美国Red Lion公司的一系列安全边缘网络网关。 Red Lion DA50N 存在安全漏洞，该漏洞源于Web 用户界面上的弱密码可通过 HTTP 或 HTTPS 被利用。一旦获得此类访问权限，就可以更改其他密码。 Linux 账户的弱密码可以通过 SSH 或 Telnet 访问，前者在可信接口上默认启用。虽然 SSH 服务不支持 root 登录，但使用其他 Linux 帐户登录的用户如果有权访问相关密码，则可以使用 su 命令提升为 root 访问权限。

N/A

其他