PT-2019-12242
CVE-2019-11327
·
تاريخ النشر
2019-09-20
·
تاريخ التحديث
2019-09-23
الوصف من
CVSS 3.1
4.9
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Topcon Positioning Net-G5 GNSS Receiver version 5.2.2
Description
The web interface of the product has a local file inclusion issue. An attacker with administrative privileges can craft a special URL to read arbitrary files from the device's file system.
Recommendations
For version 5.2.2, consider restricting access to the web interface until a fix is available. As a temporary workaround, limit administrative privileges to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾