PT-2020-19274
CVE-2020-6862
·
تاريخ النشر
2020-01-17
·
تاريخ التحديث
2022-04-26
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
F6x2W product versions V6.0.10P2T2 through V6.0.10P2T5
Description
The issue allows unauthorized users to log in directly and obtain page information without entering a verification code, due to an information leak. This can be exploited for privilege escalation.
Recommendations
For versions V6.0.10P2T2 through V6.0.10P2T5, consider implementing additional verification measures to prevent unauthorized access until a patch is available.
As a temporary workaround, restrict access to sensitive page information to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾