CVE-2023-35793

概要

参考情報

• blog.kscsc.online/cves/202335793/md.html
• Dodge-MPTC/CVE-2023-35793-CSRF-On-Web-SSH · Exploit
• cassianetworks.com/products/iot-access-controller · Product

access controller のその他の脆弱性

• CVE-2023-35794高 8.8An issue was discovered in Cassia Access Controller 2.1.1.2303271039. The Web SSH terminal endpoint (spawned console) can be accessed withou…
• CVE-2023-31445中 5.3Cassia Access controller before 2.1.1.2203171453, was discovered to have a unprivileged -information disclosure vulnerability that allows re…
• CVE-2021-22685高 7.5An attacker may be able to use minify route with a relative path to view any file on the Cassia Networks Access Controller prior to 2.0.1.