PT-2018-12224
CVE-2018-13858
·
تاريخ النشر
2018-07-17
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
MusicCenter / Trivum Multiroom Setup Tool version 8.76
Description
The issue allows unauthorized remote attackers to reboot or execute other functions. This can be achieved via the "/xml/system/control.xml" API endpoint, using the GET request with the
action variable set to reboot, for example, "?action=reboot".Recommendations
For MusicCenter / Trivum Multiroom Setup Tool version 8.76, as a temporary workaround, consider restricting access to the "/xml/system/control.xml" API endpoint to minimize the risk of exploitation. Avoid using the
action variable in the affected API endpoint until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾