PT-2021-13737
CVE-2021-20041
·
تاريخ النشر
2021-12-08
·
تاريخ التحديث
2021-12-10
الوصف من
CVSS 2.0
7.8
عاليةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions:
SMA 200
SMA 210
SMA 400
SMA 410
SMA 500v
Description:
An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to "/fileshare/sonicfiles/sonicfiles" resulting in a loop with unreachable exit condition.
Recommendations:
For SMA 200, update to a version that fixes the issue.
For SMA 210, update to a version that fixes the issue.
For SMA 400, update to a version that fixes the issue.
For SMA 410, update to a version that fixes the issue.
For SMA 500v, update to a version that fixes the issue.
As a temporary workaround, consider restricting access to the "/fileshare/sonicfiles/sonicfiles" endpoint until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾