PT-2022-8982
CVE-2020-36531
·
تاريخ النشر
2022-06-03
·
تاريخ التحديث
2022-06-14
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SevOne Network Management System versions up to 5.7.2.22
Description
A critical issue has been found in the Device Manager Page, where an injection leads to privilege escalation. The attack may be initiated remotely.
Recommendations
For versions up to 5.7.2.22, consider restricting access to the Device Manager Page until a fix is available.
As a temporary workaround, avoid using the Device Manager Page to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾