Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hfmc-m4wv-c2gj

Опубликовано: 14 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Avdor CIS - crystal quality Credentials Management Errors. The product is phone call recorder, you can hear all the recorded calls without authenticate to the system. Attacker sends crafted URL to the system: ip:port//V=2;ChannellD=number;Ext=number;Command=startLM;Client=number;Request=number;R=number number - id of the recorded number.

Avdor CIS - crystal quality Credentials Management Errors. The product is phone call recorder, you can hear all the recorded calls without authenticate to the system. Attacker sends crafted URL to the system: ip:port//V=2;ChannellD=number;Ext=number;Command=startLM;Client=number;Request=number;R=number number - id of the recorded number.

EPSS

Процентиль: 40%
0.00178
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-668

Связанные уязвимости

CVSS3: 4.9
nvd
больше 3 лет назад

Avdor CIS - crystal quality Credentials Management Errors. The product is phone call recorder, you can hear all the recorded calls without authenticate to the system. Attacker sends crafted URL to the system: ip:port//V=2;ChannellD=number;Ext=number;Command=startLM;Client=number;Request=number;R=number number - id of the recorded number.

EPSS

Процентиль: 40%
0.00178
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-668