CVE-2021-32951

概要

参考情報

• us-cert.cisa.gov/ics/advisories/icsa-21-229-02 · Patch

webaccess/nms のその他の脆弱性

• CVE-2020-10631緊急 9.8An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's (versions prior to 3.0.2) control.
• CVE-2020-10629高 7.5WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive f…
• CVE-2020-10625緊急 9.8WebAccess/NMS (versions prior to 3.0.2) allows an unauthenticated remote user to create a new admin account.
• CVE-2020-10623中 6.5Multiple vulnerabilities could allow an attacker with low privileges to perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to …
• CVE-2020-10619緊急 9.1An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2) control.