Description
There is no limit to the number of attempts to authenticate for the local configuration pages for the Hills ComNav Version 3002-19 interface, which allows local attackers to brute-force credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Interlogix | Hills ComNav | unspecified – < 3002-19 | 3002-19 |
Advisories 1
- ICSA-22-109-01 Interlogix Hills ComNav CISA ICS & IT advisories · Apr 19, 2022