PT-2022-22238
CVE-2022-34607
·
تاريخ النشر
2022-07-20
·
تاريخ التحديث
2022-07-26
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
H3C Magic R200 version R200V200R004L02
Description
A stack overflow issue was discovered via the
HOST parameter at the "/doping.asp" API endpoint.Recommendations
For H3C Magic R200 version R200V200R004L02, as a temporary workaround, consider restricting access to the "/doping.asp" API endpoint to minimize the risk of exploitation. Avoid using the
HOST parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾