Description (CNA)
VPN Firewall developed by QNO Technology has a Insufficient Entropy vulnerability, allowing unauthenticated remote attackers to obtain any logged-in user session through brute-force attacks and subsequently log into the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| QNO Technology / VPN Firewall | affected 0 |
CWE
CWE-331
References
- https://www.twcert.org.tw/tw/cp-132-10613-e1780-1.html
- https://www.twcert.org.tw/en/cp-139-10614-dee41-2.html
ADP enrichment
No English description supplied.
No references supplied.