Landesk Vulnerabilidad

Cronología

Escribe

Not Defined10

Producto

LANDesk Management Suite4
LANDESK Management Suite2
LANDesk LANDesk Management Suite2
LANDesk Lenovo ThinkManagement Console2

Contramedidas

Official Fix4
Temporary Fix0
Workaround0
Unavailable4
Not Defined2

Explotabilidad

High4
Functional2
Proof-of-Concept0
Unproven0
Not Defined4

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent2
Network8

Autenticación

Not Defined0
High0
Low0
None10

La interacción del usuario

Not Defined0
Required4
None6

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤54
≤62
≤72
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤54
≤64
≤72
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤54
≤62
≤72
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k2
<2k2
<5k4
<10k0
<25k0
<50k0
<100k0
≥100k2

Explotar hoy

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

Affected Products (5): LANDesk Management Suite (2), Landesk Security Suite (1), Lenovo ThinkManagement Console (2), Management Gateway (1), Management Suite (4)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2017-01-238.58.5LANDesk Management Suite Packet collector.exe desbordamiento de búferDesconocidoNot DefinedNot Defined0.038200.00CVE-2016-3147
2015-04-214.34.3LANDesk Management Suite serverServices.aspx cross site request forgeryDesconocidoNot DefinedNot Defined0.001510.00CVE-2014-5361
2015-02-034.34.1LANDESK Management Suite Admin Interface cross site scriptingDesconocidoNot DefinedOfficial Fix0.002620.00CVE-2014-5360
2012-02-175.35.1LANDesk Lenovo ThinkManagement Console directory traversalDesconocidoHighUnavailable0.562690.00CVE-2012-1196
2012-02-177.37.3LANDesk Lenovo ThinkManagement Console escalada de privilegiosDesconocidoHighNot Defined0.688450.00CVE-2012-1195
2010-11-108.07.6LANDesk Management Gateway drivers.php escalada de privilegiosDesconocidoProof-of-ConceptNot Defined0.024490.00CVE-2010-2892
2009-02-197.57.0LANDesk LANDesk Management Suite TFTP Service PXEMTFTP.exe directory traversalDesconocidoFunctionalUnavailable0.013280.00CVE-2008-6195
2008-09-1810.09.0LANDesk Landesk Security Suite qipsrvr.exe desbordamiento de búferDesconocidoProof-of-ConceptOfficial Fix0.403350.00CVE-2008-2468
2008-04-025.35.1Landesk Software LANDesk Management Suite TFTP Service pxemtftp.exe directory traversalDesconocidoHighOfficial Fix0.005620.04CVE-2008-1643
2007-04-166.35.5LANDesk Management Suite Alert Service desbordamiento de búferDesconocidoHighOfficial Fix0.930590.02CVE-2007-1674

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you need the next level of professionalism?

Upgrade your account now!