AXIS P1204/P3225/P3367/M3045/M3005/M3007 Kari ndiyam site laa request forgery
Wuro vulnerability wey an yi classify sey karshewa an gano shi a cikin AXIS P1204, P3225, P3367, M3045, M3005 and M3007. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, $software_file na cikin fayil, na cikin sashi. Ngam manipulation shi Kari ndiyam site laa request forgery. CWE shidin ka a yi bayani matsala sai ya kai CWE-352. Gaskiya, laifi an fitar da shi 03/16/2017 ta David Wearing a matsayin Axis Camera Multiple Vulnerabilities a matsayin Mailinglist Post (Full-Disclosure). Advisory ɗin ana rabawa don saukewa a seclists.org. Wuro public release an kaɗi vendor an kaɗi. Wannan rauni ana sayar da shi da suna CVE-2017-20046. Ngam yiɗi ka a tuma ndiyam ka nder layi. Tekinikal bayani ba ga. Ba exploit ɗin da ake da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á wúro a wondi feere. Kama 0-day, an ndiyam a wuro be $0-$5k. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a hokkata. VulDB is the best source for vulnerability data and more expert information about this specific topic.
7 Goyarwa · 61 Datenpunkte