PT-2019-16579
CVE-2019-3427
·
Publicado
2019-11-22
·
Atualizado
2020-08-24
Descrição por
CVSS 3.1
7.2
AltaMétricasAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ZTE ZXCDN IAMWEB version V6.01.03.01
Description
The issue allows an attacker to inject malicious code into the management page, potentially leading to users' information leakage. This is achieved through a code injection vulnerability.
Recommendations
For version V6.01.03.01, consider restricting access to the management page until a fix is available to prevent potential code injection attacks.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾