2 lines
3.5 KiB
JSON
2 lines
3.5 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unknown","product":"8180 IP Audio Alerter","vendor":"ALGO","versions":[{"status":"affected","version":"5.5"}]}],"source":"zdi-disclosures@trendmicro.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:algosolutions:8180_ip_audio_alerter_firmware:5.5:*:*:*:*:*:*:*","matchCriteriaId":"853BF5C9-122B-4F47-9CE7-DA3E307130ED","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:algosolutions:8180_ip_audio_alerter:-:*:*:*:*:*:*:*","matchCriteriaId":"3A20E73F-D499-4973-ADDE-8B702E6F5254","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"ALGO 8180 IP Audio Alerter Web UI Direct Request Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the web-based user interface. By navigating directly to a URL, a user can gain unauthorized access to data. An attacker can leverage this vulnerability to disclose information in the context of the device. Was ZDI-CAN-28299."},{"lang":"es","value":"Vulnerabilidad de revelación de información por solicitud directa en la interfaz de usuario web de ALGO 8180 IP Audio Alerter. Esta vulnerabilidad permite a atacantes remotos revelar información sensible en instalaciones afectadas de dispositivos ALGO 8180 IP Audio Alerter. La autenticación no es requerida para explotar esta vulnerabilidad.\n\nLa falla específica existe dentro de la interfaz de usuario basada en web. Al navegar directamente a una URL, un usuario puede obtener acceso no autorizado a datos. Un atacante puede aprovechar esta vulnerabilidad para revelar información en el contexto del dispositivo. Fue ZDI-CAN-28299."}],"id":"CVE-2026-0790","lastModified":"2026-06-17T10:11:23.273","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.0"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"zdi-disclosures@trendmicro.com","type":"Secondary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-0790","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-01-23T19:38:29.941998Z","version":"2.0.3"}}]},"published":"2026-01-23T04:16:06.720","references":[{"source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"],"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-012/"}],"sourceIdentifier":"zdi-disclosures@trendmicro.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-425"}],"source":"zdi-disclosures@trendmicro.com","type":"Secondary"}]}
|