PT-2020-2715
CVE-2020-12134
·
تاريخ النشر
2020-02-10
·
تاريخ التحديث
2020-05-06
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Nanometrics Centaur versions 4.3.23 and earlier
Nanometrics TitanSMA versions 4.2.20 and earlier
Description
The issue is related to inadequate access control in the syslog log handling. It may allow a remote attacker to elevate privileges by sending specially crafted HTTP packets.
Recommendations
For Nanometrics Centaur versions 4.3.23 and earlier, consider restricting access to the syslog log until a patch is available.
For Nanometrics TitanSMA versions 4.2.20 and earlier, restrict access to the syslog log to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾