CVE:CVE-2019-12775
CNNVD:CNNVD-201906-305
ENTTEC Datagate MK2等都是澳大利亚ENTTEC公司的产品。ENTTEC Datagate MK2是一款照明控制器。ENTTEC Storm 24是一款以太网转DMX512转换器。ENTTEC Pixelator是一款像素控制器。
多款ENTTEC产品中存在访问控制错误漏洞。该漏洞源于网络系统或产品未正确限制来自未授权角色的资源访问。以下产品及版本受到影响：使用70044_update_05032019-482之前版本固件的ENTTEC Datagate MK2；使用70044_update_05032019-482之前版本固件的Storm 24；使用70044_update_05032019-482之前版本固件的Pixelator；使用70044_update_05032019-482之前版本固件的E-Streamer MK2。
solution:Upgrade enttec datagate_mk2_firmware to a higher version than 70044:05032019-482,and avoid the version 70044:05032019-482; Upgrade enttec storm_24_firmware to a higher version than 70044:05032019-482,and avoid the version 70044:05032019-482; Upgrade enttec pixelator_firmware to a higher version than 70044:05032019-482,and avoid the version 70044:05032019-482; Upgrade enttec e-streamer_mk2_firmware to a higher version than 70044:05032019-482,and avoid the version 70044:05032019-482