PT-2021-24195
CVE-2021-45043
·
تاريخ النشر
2021-12-15
·
تاريخ التحديث
2021-12-17
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
HD-Network Real-time Monitoring System version 2.0
Description:
The issue allows for directory traversal, enabling access to sensitive files such as /etc/shadow. This is achieved through the
s Language parameter in the /language/lang API endpoint.Recommendations:
For HD-Network Real-time Monitoring System version 2.0, consider restricting access to the /language/lang API endpoint until a patch is available. As a temporary workaround, avoid using the
s Language parameter in this endpoint to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾