PT-2023-29051 · D Link · Dlink Dph-400Se

CVE-2023-43960

·

Publicado

2023-10-11

·

Atualizado

2023-10-13

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions DLINK DPH-400SE FRU version 2.2.15.8
Description An issue in the software allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component.
Recommendations For DLINK DPH-400SE FRU version 2.2.15.8, consider disabling the User Modify function in the Maintenance/Access function component as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Privilege Management

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2023-43960

Produtos afetados

Dlink Dph-400Se