CVE-2022-26519 — Interlogix Hills ComNav Improper Restriction of Excessive Authentication Attempts

CVE-2022-26519

Interlogix Hills ComNav Improper Restriction of Excessive Authentication Attempts PUBLISHED

Description (CNA)

There is no limit to the number of attempts to authenticate for the local configuration pages for the Hills ComNav Version 3002-19 interface, which allows local attackers to brute-force credentials.

Affected (CNA)

Vendor / product	Versions
Interlogix / Hills ComNav	affected unspecified before 3002-19

CWE

CWE-307

References

https://www.corporate.carrier.com/Images/CARR-PSA-Hills-ComNav-002-1121_tcm558-149392.pdf

ADP enrichment

CVE

No English description supplied.

https://www.corporate.carrier.com/Images/CARR-PSA-Hills-ComNav-002-1121_tcm558-149392.pdf

CISA-ADP

No English description supplied.

No references supplied.