Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-25qv-rf35-39r8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd.

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd.

EPSS

Процентиль: 45%
0.00224
Низкий

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 6.5
nvd
больше 4 лет назад

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiVA through 4.5.2-1.0.36229; HMP400 and HMP400W through 4.5.2-1.0.2-1eb2ffbd; and DSOS through 4.5.2-1.0.2-1eb2ffbd.

EPSS

Процентиль: 45%
0.00224
Низкий

Дефекты

CWE-918