Skip to content
OpenAdvisories
Medium · 5.5 CVE-2022-26519 EUVD-2022-31077GHSA-rv94-x2c7-f4px

Interlogix Hills ComNav Improper Restriction of Excessive Authentication Attempts

Published Apr 20, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Description

There is no limit to the number of attempts to authenticate for the local configuration pages for the Hills ComNav Version 3002-19 interface, which allows local attackers to brute-force credentials.

Affected products

VendorProductAffectedFixed
Interlogix Hills ComNav unspecified – < 3002-19 3002-19

Advisories 1

References