Description
AeroAdmin 4.1 uses an insecure protocol (HTTP) to perform software updates. An attacker can hijack an update via man-in-the-middle in order to execute code in the machine.
Unscored
CVE-2017-8894
EUVD-2017-17834GHSA-gx8r-xcqr-77hj
AeroAdmin 4.1 uses an insecure protocol (HTTP) to perform software updates. An attacker can hijack an update via man-in-the-middle in order…
Published Jul 2, 2017 · Updated Aug 5, 2024 · Assigned by mitre