PT-2023-32475 · Lanaccess · Lanaccess Onsafe Monitorhm
CVE-2023-6012
·
Publicado
2023-11-08
·
Atualizado
2023-11-16
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Lanaccess ONSAFE MonitorHM version 3.7.0
Description
An improper input validation issue has been found, which could allow a remote attacker to exploit the checkbox element and perform remote code execution, potentially compromising the entire infrastructure.
Recommendations
For Lanaccess ONSAFE MonitorHM version 3.7.0, update to a version that fixes the improper input validation vulnerability to prevent remote code execution.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Lanaccess Onsafe Monitorhm