CVE-2023-36649

概要

参考情報

• cvcn.gov.it/cvcn/cve/CVE-2023-36649 · Exploit

cryptospike のその他の脆弱性

• CVE-2023-36654中 6.5Directory traversal in the log-download REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to download …
• CVE-2023-36652中 4.3A SQL Injection in the users searching REST API endpoint in ProLion CryptoSpike 3.0.15P2 allows remote authenticated attackers to read datab…
• CVE-2023-36651高 7.2Hidden and hard-coded credentials in ProLion CryptoSpike 3.0.15P2 allow remote attackers to login to web management as super-admin and consu…
• CVE-2023-36650高 7.2A missing integrity check in the update system in ProLion CryptoSpike 3.0.15P2 allows attackers to execute OS commands as the root Linux use…
• CVE-2023-36648高 8.2Missing authentication in the internal data streaming system in ProLion CryptoSpike 3.0.15P2 allows remote unauthenticated users to read pot…