Wuro vulnerability wey an yi classify sey karshewa an gano shi a cikin D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L har 20241028. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, /xml/info.xml na cikin fayil, HTTP GET Request Handler na cikin sashi. Ngam manipulation shi Bayani fitowa. CWE shidin ka a yi bayani matsala sai ya kai CWE-200. Gaskiya, laifi an fitar da shi 11/06/2024. Advisory ɗin ana rabawa don saukewa a netsecfish.notion.site. Wannan rauni ana sayar da shi da suna CVE-2024-10916. Ngam yiɗi ka a tuma ndiyam ka nder waya. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a netsecfish.notion.site. Kama 0-day, an ndiyam a wuro be $5k-$25k. Ana shawar da a yi amfani da katangar wuta mai tsauri. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

1 Goyarwa · 56 Datenpunkte