PT-2018-8550
CVE-2017-9970
·
Publicado
2018-02-12
·
Atualizado
2018-03-09
Descrição por
CVSS 2.0
9.0
AltaMétricasAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
StruxureOn Gateway versions 1.1.3 and prior
Description:
A remote code execution issue exists, allowing for the upload of a zip file with crafted metadata to any directory on the host machine, potentially leading to remote code execution.
Recommendations:
For StruxureOn Gateway versions 1.1.3 and prior, update to a version later than 1.1.3 to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾