Multilaser RE057/RE170 2.1/2.2 Backup File /param.file.tgz Bayani fitowa

Wuro vulnerability wey an yi classify sey kura an gano shi a cikin Multilaser RE057 and RE170 2.1/2.2. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, /param.file.tgz na cikin fayil, Backup File Handler na cikin sashi. Ngam manipulation shi Bayani fitowa. CWE shidin ka a yi bayani matsala sai ya kai CWE-200. Gaskiya, laifi an fitar da shi 02/02/2023. Wannan rauni ana sayar da shi da suna CVE-2023-0658. Ngam yiɗi ka a tuma ndiyam ka nder internet. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á wúro huɗɗi-na-gaskiya. Kama 0-day, an ndiyam a wuro be $0-$5k. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

3 Goyarwa · 68 Datenpunkte

FurɗeSúgá
02/02/2023 20:47
Gargadi 1/2
03/04/2023 08:37
Gargadi 2/2
03/04/2023 08:38
software_vendorMultilaserMultilaserMultilaser
software_nameRE057/RE170RE057/RE170RE057/RE170
software_version2.1/2.22.1/2.22.1/2.2
software_componentBackup File HandlerBackup File HandlerBackup File Handler
software_file/param.file.tgz/param.file.tgz/param.file.tgz
vulnerability_cweCWE-200 (Bayani fitowa)CWE-200 (Bayani fitowa)CWE-200 (Bayani fitowa)
vulnerability_risk222
cvss3_vuldb_avNNN
cvss3_vuldb_acLLL
cvss3_vuldb_prNNN
cvss3_vuldb_uiNNN
cvss3_vuldb_sUUU
cvss3_vuldb_cLLL
cvss3_vuldb_iNNN
cvss3_vuldb_aNNN
cvss3_vuldb_ePPP
cvss3_vuldb_rcRRR
exploit_availability111
source_cveCVE-2023-0658CVE-2023-0658CVE-2023-0658
cna_responsibleVulDBVulDBVulDB
advisory_date1675292400 (02/02/2023)1675292400 (02/02/2023)1675292400 (02/02/2023)
cvss2_vuldb_avNNN
cvss2_vuldb_acLLL
cvss2_vuldb_auNNN
cvss2_vuldb_ciPPP
cvss2_vuldb_iiNNN
cvss2_vuldb_aiNNN
cvss2_vuldb_ePOCPOCPOC
cvss2_vuldb_rcURURUR
cvss2_vuldb_rlNDNDND
cvss3_vuldb_rlXXX
cvss2_vuldb_basescore5.05.05.0
cvss2_vuldb_tempscore4.34.34.3
cvss3_vuldb_basescore5.35.35.3
cvss3_vuldb_tempscore4.84.84.8
cvss3_meta_basescore5.35.36.0
cvss3_meta_tempscore4.84.85.9
price_0day$0-$5k$0-$5k$0-$5k
cve_assigned1675292400 (02/02/2023)1675292400 (02/02/2023)
cve_nvd_summaryA vulnerability, which was classified as critical, was found in Multilaser RE057 and RE170 2.1/2.2. This affects an unknown part of the file /param.file.tgz of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-220053 was assigned to this vulnerability.A vulnerability, which was classified as critical, was found in Multilaser RE057 and RE170 2.1/2.2. This affects an unknown part of the file /param.file.tgz of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-220053 was assigned to this vulnerability.
cvss3_nvd_avN
cvss3_nvd_acL
cvss3_nvd_prN
cvss3_nvd_uiN
cvss3_nvd_sU
cvss3_nvd_cH
cvss3_nvd_iN
cvss3_nvd_aN
cvss2_nvd_avN
cvss2_nvd_acL
cvss2_nvd_auN
cvss2_nvd_ciP
cvss2_nvd_iiN
cvss2_nvd_aiN
cvss3_cna_avN
cvss3_cna_acL
cvss3_cna_prN
cvss3_cna_uiN
cvss3_cna_sU
cvss3_cna_cL
cvss3_cna_iN
cvss3_cna_aN
cve_cnaVulDB
cvss2_nvd_basescore5.0
cvss3_nvd_basescore7.5
cvss3_cna_basescore5.3

Do you know our Splunk app?

Download it now for free!