PT-2020-10896
CVE-2019-3404
·
تاريخ النشر
2020-03-04
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
360 router versions P0 and F5C
Description
The issue allows users to abuse background app CGI functions without authentication by adding special fields to the URI of the router app function.
Recommendations
For 360 router version P0, consider restricting access to the background app CGI functions until a fix is available.
For 360 router version F5C, consider restricting access to the background app CGI functions until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾