CVE-2011-3502

概要

参考情報

• aluigi.altervista.org/adv/cogent_4-adv.txt · Exploit
• us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-03.pdf · US Government Resource

cogent datahub のその他の脆弱性

• CVE-2016-2288高 7.8Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or guest role to modify a file.
• CVE-2014-2354中 5.0Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cle…
• CVE-2014-2353中 4.3Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via u…
• CVE-2014-2352中 6.4The directory specifier can include designators that can be used to traverse the directory path. Exploiting this vulnerability may enable a…
• CVE-2014-3789高 7.5GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspeci…