CVE-2024-36388

Description

References

• gov.il/en/Departments/faq/cve_advisories · Third Party Advisory

devicehub 的其他漏洞

• CVE-2024-36392中危 6.1MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2024-36391高危 7.4MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic
• CVE-2024-36390高危 7.5MileSight DeviceHub - CWE-20 Improper Input Validation may allow Denial of Service
• CVE-2024-36389严重 9.8MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass
• CVE-2024-27776严重 9.8MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCE