CVE-2024-7921: falha de média gravidade em Anhui Deshun Intelligent Technology Jieshun…
Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetDataList access control
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.7%
A vulnerability has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /report/ParkOutRecord/GetDataList. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Anhui Deshun Intelligent Technology · Jieshun JieLink+ JSOTC2016CVEs relacionadas — Anhui Deshun Intelligent Technology Jieshun…
No mesmo produto, das mais perigosas para as menos.