CVE-2024-36390

概要

参考情報

• gov.il/en/Departments/faq/cve_advisories · Third Party Advisory

devicehub のその他の脆弱性

• CVE-2024-36392中 6.1MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2024-36391高 7.4MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic
• CVE-2024-36389緊急 9.8MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass
• CVE-2024-36388緊急 9.8MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function
• CVE-2024-27776緊急 9.8MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCE