CVE-2019-7280 - Prima Systems FlexAir, Versions 2.3.38 and prior

Back Back to CVE browser

HIGH

Prima Systems FlexAir, Versions 2.3.38 and prior

Published Jul 1, 2019

8.8

HIGH

CVSS 3.1

EPSS 2.35%

Description

Prima Systems FlexAir, Versions 2.3.38 and prior. The session-ID is of an insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session and bypass authentication.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-613

References (3)

https://applied-risk.com/labs/advisories
x_refsource_MISCNot ApplicableThird Party Advisory
https://www.applied-risk.com/resources/ar-2019-007
x_refsource_MISCThird Party Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-211-02
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://applied-risk.com/labs/advisories		x_refsource_MISCNot ApplicableThird Party Advisory
https://www.applied-risk.com/resources/ar-2019-007		x_refsource_MISCThird Party Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-211-02		x_refsource_MISCThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 1, 2019

Updated Aug 4, 2024

Reserved Jan 31, 2019

Link CVE-2019-7280

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-7280

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-7280