Parallels Vulnerabilidad

Cronología

Escribe

Producto

Parallels Desktop44
Parallels Plesk Panel39
Parallels Plesk Small Business Panel16
Parallels Plesk10
Parallels Remote Application Server5

Contramedidas

Official Fix23
Temporary Fix0
Workaround0
Unavailable50
Not Defined56

Explotabilidad

High14
Functional0
Proof-of-Concept7
Unproven38
Not Defined70

Vector de acceso

Not Defined0
Physical0
Local39
Adjacent4
Network86

Autenticación

Not Defined0
High11
Low47
None71

La interacción del usuario

Not Defined0
Required15
None114

C3BM Index

CVSSv3 Base

≤10
≤20
≤34
≤45
≤512
≤637
≤715
≤826
≤911
≤1019

CVSSv3 Temp

≤10
≤20
≤34
≤46
≤532
≤621
≤711
≤825
≤928
≤102

VulDB

≤10
≤20
≤34
≤47
≤512
≤639
≤715
≤826
≤97
≤1019

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤73
≤89
≤98
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤812
≤92
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k17
<2k36
<5k75
<10k0
<25k0
<50k1
<100k0
≥100k0

Explotar hoy

<1k120
<2k6
<5k3
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (13): Access (3), Access Agent (1), Confixx (1), Desktop (44), H-Sphere (3), Parallels Desktop (4), Plesk (10), Plesk Panel (39), Plesk Small Business Panel (16), RAS (1), Remote Application Server (5), Virtuozzo (1), Virtuozzo Containers (1)

Link to Vendor Website: https://www.parallels.com/

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2023-12-197.87.5Parallels Desktop autenticación débilDesconocidoNot DefinedOfficial Fix0.000000.02CVE-2023-50228
2023-12-197.87.5Parallels Desktop escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.000000.04CVE-2023-50226
2023-12-197.57.2Parallels Desktop virtio-gpu Virtual Device desbordamiento de búferDesconocidoNot DefinedOfficial Fix0.000000.04CVE-2023-50227
2023-12-155.55.3Parallels RAS Remote Application Server escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.002100.00CVE-2023-45894
2023-03-305.35.1Parallels Desktop Toolgate condición de carreraDesconocidoNot DefinedOfficial Fix0.000000.00CVE-2023-27327
2023-03-305.35.1Parallels Desktop Service Local Privilege EscalationDesconocidoNot DefinedOfficial Fix0.000000.00CVE-2023-27322
2023-03-305.35.1Parallels Desktop Updater condición de carreraDesconocidoNot DefinedOfficial Fix0.000000.06CVE-2023-27323
2023-03-305.55.3Parallels Desktop Updater Privilege EscalationDesconocidoNot DefinedOfficial Fix0.000000.00CVE-2023-27324
2023-03-305.55.3Parallels Desktop Updater Privilege EscalationDesconocidoNot DefinedOfficial Fix0.000000.00CVE-2023-27325
2023-03-305.35.1Parallels Desktop Toolgate escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.000000.00CVE-2023-27328
2023-03-306.76.4Parallels Desktop Toolgate directory traversalDesconocidoNot DefinedOfficial Fix0.000000.00CVE-2023-27326
2022-11-237.27.1Parallels Remote Application Server Web Client escalada de privilegiosApplication Server SoftwareNot DefinedNot Defined0.003240.02CVE-2022-40870
2022-07-198.18.1Parallels Access Desktop Control Agent service escalada de privilegiosDesconocidoNot DefinedNot Defined0.000450.02CVE-2022-34902
2022-07-197.97.9Parallels Desktop ACPI Virtual Device divulgación de informaciónDesconocidoNot DefinedNot Defined0.000450.00CVE-2022-34889
2022-07-198.18.1Parallels Access escalada de privilegiosDesconocidoNot DefinedNot Defined0.000450.00CVE-2022-34901
2022-07-197.47.4Parallels Access Symbolic Links condición de carreraDesconocidoNot DefinedNot Defined0.000450.00CVE-2022-34899
2022-07-198.18.1Parallels Desktop escalada de privilegiosDesconocidoNot DefinedNot Defined0.000450.00CVE-2022-34891
2022-07-198.18.1Parallels Desktop condición de carreraDesconocidoNot DefinedNot Defined0.000450.00CVE-2022-34892
2022-07-197.57.4Parallels Desktop Tools desbordamiento de búferDesconocidoNot DefinedOfficial Fix0.000450.00CVE-2022-34890
2022-07-198.18.1Parallels Access Agent Dispatcher Service escalada de privilegiosDesconocidoNot DefinedNot Defined0.000450.03CVE-2022-34900
2022-07-167.97.9Parallels Desktop HDAudio Virtual Device desbordamiento de búferDesconocidoNot DefinedNot Defined0.000450.00CVE-2021-34987
2022-07-167.07.0Parallels Desktop Symbolic Links condición de carreraDesconocidoNot DefinedNot Defined0.000450.00CVE-2021-34986
2022-05-173.53.5Parallels H-Sphere index_en.php cross site scriptingDesconocidoNot DefinedNot Defined0.000870.00CVE-2022-30777
2022-01-257.67.6Parallels Desktop denegación de servicioDesconocidoNot DefinedNot Defined0.000450.00CVE-2021-34869
2022-01-257.67.6Parallels Desktop Toolgate denegación de servicioDesconocidoNot DefinedNot Defined0.000450.02CVE-2021-34868

104 no se muestran más entradas

Want to stay up to date on a daily basis?

Enable the mail alert feature now!