PT-2020-14752
CVE-2020-16100
·
تاريخ النشر
2020-09-15
·
تاريخ التحديث
2020-09-24
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Command Centre service versions prior to v8.20.1166
Command Centre service versions prior to v8.10.1211
Command Centre service versions prior to v8.00.1228
Command Centre service versions 7.90 and earlier
Description
The issue allows an unauthenticated remote DCOM websocket connection to crash the Command Centre service's DCOM websocket thread due to improper shutdown of closed websocket connections. This prevents the service from accepting future DCOM websocket connections, specifically those from the Configuration Client.
Recommendations
For versions prior to v8.20.1166, update to v8.20.1166 or later.
For versions prior to v8.10.1211, update to v8.10.1211 or later.
For versions prior to v8.00.1228, update to v8.00.1228 or later.
For versions 7.90 and earlier, update to a version later than 7.90.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾