Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mg2f-7p87-hxwv

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability in the REST API endpoint of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected device. The vulnerability is due to missing authentication on some of the API calls. An attacker could exploit this vulnerability by sending a request to one of the affected calls. A successful exploit could allow the attacker to interact with some parts of the API.

A vulnerability in the REST API endpoint of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected device. The vulnerability is due to missing authentication on some of the API calls. An attacker could exploit this vulnerability by sending a request to one of the affected calls. A successful exploit could allow the attacker to interact with some parts of the API.

EPSS

Процентиль: 48%
0.00247
Низкий

Связанные уязвимости

CVSS3: 6.5
nvd
больше 5 лет назад

A vulnerability in the REST API endpoint of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected device. The vulnerability is due to missing authentication on some of the API calls. An attacker could exploit this vulnerability by sending a request to one of the affected calls. A successful exploit could allow the attacker to interact with some parts of the API.

CVSS3: 6.5
fstec
около 6 лет назад

Уязвимость реализации интерфейса REST API системы управления цифровым контентом Cisco Vision Dynamic Signage Director, позволяющая нарушителю получить доступ к некоторым частям программного интерфейса приложения

EPSS

Процентиль: 48%
0.00247
Низкий