AXIS P1204/P3225/P3367/M3045/M3005/M3007 Kari ndiyam site laa request forgery

Wuro vulnerability wey an yi classify sey karshewa an gano shi a cikin AXIS P1204, P3225, P3367, M3045, M3005 and M3007. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, $software_file na cikin fayil, na cikin sashi. Ngam manipulation shi Kari ndiyam site laa request forgery. CWE shidin ka a yi bayani matsala sai ya kai CWE-352. Gaskiya, laifi an fitar da shi 03/16/2017 ta David Wearing a matsayin Axis Camera Multiple Vulnerabilities a matsayin Mailinglist Post (Full-Disclosure). Advisory ɗin ana rabawa don saukewa a seclists.org. Wuro public release an kaɗi vendor an kaɗi. Wannan rauni ana sayar da shi da suna CVE-2017-20046. Ngam yiɗi ka a tuma ndiyam ka nder layi. Tekinikal bayani ba ga. Ba exploit ɗin da ake da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á wúro a wondi feere. Kama 0-day, an ndiyam a wuro be $0-$5k. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a hokkata. VulDB is the best source for vulnerability data and more expert information about this specific topic.

7 Goyarwa · 61 Datenpunkte

FurɗeGargadi 2/6
06/08/2022 09:00
Gargadi 3/6
06/08/2022 09:01
Gargadi 4/6
11/22/2022 09:39
Gargadi 5/6
11/22/2022 09:41
Gargadi 6/6
11/22/2022 09:45
software_vendorAXISAXISAXISAXISAXIS
software_nameP1204/P3225/P3367/M3045/M3005/M3007P1204/P3225/P3367/M3045/M3005/M3007P1204/P3225/P3367/M3045/M3005/M3007P1204/P3225/P3367/M3045/M3005/M3007P1204/P3225/P3367/M3045/M3005/M3007
software_componentCSRF Protection
vulnerability_vendorinformdate1479945600 (11/24/2016)1479945600 (11/24/2016)1479945600 (11/24/2016)1479945600 (11/24/2016)1479945600 (11/24/2016)
vulnerability_risk11111
vulnerability_historic00000
cvss2_vuldb_basescore5.15.15.15.15.1
cvss2_vuldb_tempscore4.44.44.44.44.4
cvss2_vuldb_avNNNNN
cvss2_vuldb_acHHHHH
cvss2_vuldb_auNNNNN
cvss2_vuldb_ciPPPPP
cvss2_vuldb_iiPPPPP
cvss2_vuldb_aiPPPPP
cvss3_meta_basescore5.05.05.05.05.0
cvss3_meta_tempscore4.84.84.84.84.8
cvss3_vuldb_basescore5.05.05.05.05.0
cvss3_vuldb_tempscore4.84.84.84.84.8
cvss3_vuldb_avNNNNN
cvss3_vuldb_acHHHHH
cvss3_vuldb_prNNNNN
cvss3_vuldb_uiRRRRR
cvss3_vuldb_sUUUUU
cvss3_vuldb_cLLLLL
cvss3_vuldb_iLLLLL
cvss3_vuldb_aLLLLL
advisory_date1489622400 (03/16/2017)1489622400 (03/16/2017)1489622400 (03/16/2017)1489622400 (03/16/2017)1489622400 (03/16/2017)
advisory_locationFull-DisclosureFull-DisclosureFull-DisclosureFull-DisclosureFull-Disclosure
advisory_typeMailinglist PostMailinglist PostMailinglist PostMailinglist PostMailinglist Post
advisory_urlhttp://seclists.org/fulldisclosure/2017/Mar/41http://seclists.org/fulldisclosure/2017/Mar/41http://seclists.org/fulldisclosure/2017/Mar/41http://seclists.org/fulldisclosure/2017/Mar/41http://seclists.org/fulldisclosure/2017/Mar/41
advisory_identifierAxis Camera Multiple VulnerabilitiesAxis Camera Multiple VulnerabilitiesAxis Camera Multiple VulnerabilitiesAxis Camera Multiple VulnerabilitiesAxis Camera Multiple Vulnerabilities
advisory_coordination11111
person_nameDavid WearingDavid WearingDavid WearingDavid WearingDavid Wearing
advisory_reaction_date1480636800 (12/02/2016)1480636800 (12/02/2016)1480636800 (12/02/2016)1480636800 (12/02/2016)1480636800 (12/02/2016)
advisory_disputed00000
price_0day$0-$5k$0-$5k$0-$5k$0-$5k$0-$5k
countermeasure_nameGargajiyaGargajiyaGargajiyaGargajiyaGargajiya
source_seealso98911 98912 98913 9891498911 98912 98913 9891498911 98912 98913 9891498911 98912 98913 9891498911 98912 98913 98914
cvss2_vuldb_eNDNDNDNDND
cvss2_vuldb_rlOFOFOFOFOF
cvss2_vuldb_rcCCCCC
cvss3_vuldb_eXXXXX
cvss3_vuldb_rlOOOOO
cvss3_vuldb_rcCCCCC
0day_days112112112112112
vulnerability_cweCWE-269 (kura hakki ndiyam)CWE-352 (Kari ndiyam site laa request forgery)CWE-352 (Kari ndiyam site laa request forgery)CWE-352 (Kari ndiyam site laa request forgery)CWE-352 (Kari ndiyam site laa request forgery)
source_cveCVE-2017-20046CVE-2017-20046CVE-2017-20046CVE-2017-20046CVE-2017-20046
cna_responsibleVulDBVulDBVulDBVulDBVulDB
cve_assigned1654639200 (06/08/2022)1654639200 (06/08/2022)1654639200 (06/08/2022)
cvss2_nvd_avNN
cvss2_nvd_acMM
cvss2_nvd_auNN
cvss2_nvd_ciNN
cvss2_nvd_iiPP
cvss2_nvd_aiNN
cvss2_nvd_basescore4.34.3
cve_nvd_summaryA vulnerability classified as problematic has been found in AXIS P1204, P3225, P3367, M3045, M3005 and M3007. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. It is recommended to upgrade the affected component.

Do you need the next level of professionalism?

Upgrade your account now!