PT-2023-29558 · Netis · Netis N3Mv2
CVE-2023-45467
·
Publicado
2023-10-13
·
Atualizado
2023-10-19
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Netis N3Mv2 version 1.0.1.865
Description
A command injection issue was discovered via the
ntpServIP parameter in the Time Settings. This allows for potential exploitation.Recommendations
For Netis N3Mv2 version 1.0.1.865, consider restricting access to the Time Settings until a patch is available. As a temporary workaround, avoid using the
ntpServIP parameter in the Time Settings to minimize the risk of exploitation.Exploit
Correção
OS Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Netis N3Mv2