PT-2021-10075
CVE-2020-16839
·
تاريخ النشر
2021-07-27
·
تاريخ التحديث
2022-07-12
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
Crestron DM-NVX-DIR versions prior to DM-XIO/1-0-3-802 patch
Crestron DM-NVX-DIR80 versions prior to DM-XIO/1-0-3-802 patch
Crestron DM-NVX-ENT versions prior to DM-XIO/1-0-3-802 patch
Description:
The issue allows the password to be changed by sending an unauthenticated WebSocket request.
Recommendations:
For Crestron DM-NVX-DIR versions prior to DM-XIO/1-0-3-802 patch, apply the DM-XIO/1-0-3-802 patch to resolve the issue.
For Crestron DM-NVX-DIR80 versions prior to DM-XIO/1-0-3-802 patch, apply the DM-XIO/1-0-3-802 patch to resolve the issue.
For Crestron DM-NVX-ENT versions prior to DM-XIO/1-0-3-802 patch, apply the DM-XIO/1-0-3-802 patch to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾