Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pgff-hrqv-m9qw

Опубликовано: 03 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

D-Link D-View shutdown_coreserver Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the shutdown_coreserver action. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-19572.

D-Link D-View shutdown_coreserver Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the shutdown_coreserver action. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-19572.

EPSS

Процентиль: 72%
0.00699
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 7.5
nvd
почти 2 года назад

D-Link D-View shutdown_coreserver Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability. The specific flaw exists within the shutdown_coreserver action. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-19572.

CVSS3: 5.9
fstec
больше 2 лет назад

Уязвимость компонента Shutdown_coreserver платформы управления сетевыми устройствами D-View 8, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 72%
0.00699
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-306