Gaskiya vulnerability da aka ware a matsayin karshewa an samu a Solare Solar-Log 2.8.4-56/3.5.2-85. Hakika, aikin $software_function ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil $software_file, a cikin sashen $software_component. A sa manipulation ka Bayani fitowa. Idan an yi amfani da CWE don bayyana matsala, zai kai CWE-200. Hakika, rauni an bayyana shi 03/22/2017 daga T. Weber tare da SEC Consult Vulnerability Lab kamar SEC Consult SA-20170322-0 :: Multiple vulnerabilities in Solare Datensysteme Solar-Log devices kamar Mailinglist Post (Full-Disclosure). An raba bayanin tsaro don saukewa a seclists.org. Vendor an kaɗi, public release an kaɗi. Wannan matsala ana saninta da CVE-2017-20022. Ngam yiɗi ka a tuma ndiyam ka internet. Tekinikal faɗi ba ga. Babu exploit ɗin da ake samu. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á sàmbu a wondi feere. 0-day shima, an ndiyam a wuro be $0-$5k. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a faggata. Once again VulDB remains the best source for vulnerability data.

6 Goyarwa · 92 Datenpunkte