PT-2018-8550
CVE-2017-9970
·
تاريخ النشر
2018-02-12
·
تاريخ التحديث
2018-03-09
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
StruxureOn Gateway versions 1.1.3 and prior
Description:
A remote code execution issue exists, allowing for the upload of a zip file with crafted metadata to any directory on the host machine, potentially leading to remote code execution.
Recommendations:
For StruxureOn Gateway versions 1.1.3 and prior, update to a version later than 1.1.3 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾