CVE-2020-10617

概要

参考情報

• us-cert.gov/ics/advisories/icsa-20-098-01 · Third Party Advisory

webaccess/nms のその他の脆弱性

• CVE-2021-32951中 5.3WebAccess/NMS (Versions prior to v3.0.3_Build6299) has an improper authentication vulnerability, which may allow unauthorized users to view …
• CVE-2020-10631緊急 9.8An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's (versions prior to 3.0.2) control.
• CVE-2020-10629高 7.5WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive f…
• CVE-2020-10625緊急 9.8WebAccess/NMS (versions prior to 3.0.2) allows an unauthenticated remote user to create a new admin account.
• CVE-2020-10623中 6.5Multiple vulnerabilities could allow an attacker with low privileges to perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to …