PT-2021-19704
CVE-2021-3243
·
تاريخ النشر
2021-04-15
·
تاريخ التحديث
2021-04-20
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Wfilter ICF version 5.0.117
Description:
The issue allows an attacker in the same LAN to inject a payload into the system's logs by crafting a packet with a malicious
User-Agent header. This can lead to a takeover of the system through its plugin-running function.Recommendations:
For Wfilter ICF version 5.0.117, consider disabling the plugin-running function as a temporary workaround until a patch is available. Restrict access to the system's logs to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾