CVE-2012-3018: Medium severity iconics genesis32 vulnerability
The lockout-recovery feature in the Security Configurator component in ICONICS GENESIS32 9.22 and earlier and BizViz 9.22 and earlier uses an improper encryption algorithm for generation of an authentication code, which allows local users to bypass intended access restrictions and obtain administrative access by predicting a challenge response.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3018?
CVE-2012-3018 is considered to have a high severity due to its potential to allow unauthorized access to sensitive administrative functions.
How do I fix CVE-2012-3018?
To mitigate CVE-2012-3018, upgrade to the latest version of ICONICS GENESIS32 or BizViz that addresses this vulnerability.
What software is affected by CVE-2012-3018?
CVE-2012-3018 affects ICONICS GENESIS32 versions 9.22 and earlier, and BizViz versions 9.22 and earlier.
What type of vulnerability is CVE-2012-3018?
CVE-2012-3018 is an access control vulnerability caused by improper encryption algorithms in the authentication code generation.
Can local users exploit CVE-2012-3018?
Yes, local users can exploit CVE-2012-3018 to bypass access restrictions and gain administrative access.