CVE-2023-4463

Опубликовано: 29 дек. 2023

Источник: nvd

CVSS3: 5.3

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A vulnerability classified as problematic was found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument Cookie leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249256.

Ссылки

https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11919.html
Not Applicable
https://github.com/modzero/MZ-23-01-Poly-VoIP-Devices
https://modzero.com/en/advisories/mz-23-01-poly-voip/
https://vuldb.com/?ctiid.249256
Permissions Required
https://vuldb.com/?id.249256
Third Party Advisory
https://modzero.com/en/blog/multiple-vulnerabilities-in-poly-products/
Exploit
Third Party Advisory
https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11919.html
Not Applicable
https://github.com/modzero/MZ-23-01-Poly-VoIP-Devices
https://modzero.com/en/advisories/mz-23-01-poly-voip/
https://vuldb.com/?ctiid.249256
Permissions Required
https://vuldb.com/?id.249256
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:poly:ccx_400_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:poly:ccx_400:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:poly:ccx_600_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:poly:ccx_600:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:poly:trio_8800_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:poly:trio_8800:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:poly:trio_c60_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:poly:trio_c60:-:*:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.00096

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-404

Связанные уязвимости

GHSA-g8c7-p5fx-vxh6

CVSS3: 5.3

github

около 2 лет назад

EPSS

Процентиль: 27%

0.00096

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-404