CVE:CVE-2018-6908
CNNVD:CNNVD-201811-016
Green Electronics RainMachine Mini-8和Touch HD 12 Web Application都是美国Green Electronics公司的产品。Green Electronics RainMachine Mini-8是一款智能灌溉喷水器。Touch HD 12 Web Application是一款基于Web的触摸屏应用程序。
Green Electronics RainMachine Mini-8（第2代）和Touch HD 12 Web应用程序中存在安全漏洞。攻击者可借助HTTP‘Host’包头中的127.0.0.1:port值利用该漏洞在设备上执行操作，例如检索凭据。
solution:Upgrade rainmachine mini-8_firmware to a higher version than 4.0.975,and avoid the version [4.0.539,4.0.975]; Upgrade rainmachine touch_hd_12_firmware to a higher version than 4.0.974,and avoid the version [4.0.539,4.0.974]