CVE-2019-7666

Mô tả

Tham khảo

• packetstormsecurity.com/files/155262/Prima-FlexAir-Access-Control-2.3.35-Database-Backup-Predictable-Name.html · Exploit
• applied-risk.com/labs/advisories · Third Party Advisory
• applied-risk.com/resources/ar-2019-007 · Third Party Advisory
• us-cert.gov/ics/advisories/icsa-19-211-02 · Third Party Advisory

Lỗ hổng khác của flexair

• CVE-2019-7670CAO 7.2Prima Systems FlexAir, Versions 2.3.38 and prior. The application incorrectly neutralizes special elements that could modify the intended OS…
• CVE-2019-7669CAO 8.8Prima Systems FlexAir, Versions 2.3.38 and prior. Improper validation of file extensions when uploading files could allow a remote authentic…
• CVE-2019-7668NGHIÊM TRỌNG 9.8Prima Systems FlexAir devices have Default Credentials.
• CVE-2019-7667NGHIÊM TRỌNG 9.8Prima Systems FlexAir, Versions 2.3.38 and prior. The application generates database backup files with a predictable name, and an attacker c…
• CVE-2019-7281CAO 8.8Prima Systems FlexAir, Versions 2.3.38 and prior. An unauthenticated user can send unverified HTTP requests, which may allow the attacker to…