| शीर्षक | Beijing Weili Digital Technology Co., Ltd 微力同步 v2.21.3 Unauthorized Access |
|---|
| विवरण | During security assessment of version "微力同步 v2.21.3" version,I found an unauthorized access vulnerability in the Web administration module.The vulnerability is due to the core interface of this module does not implement valid authentication logic, attackers do not need to log in account password, through direct access to the target interface. Therefore, attackers can obtain sensitive information such as device ID, system configuration, system files, device identification, etc., providing conditions for subsequent precision attacks.Corrective action must be taken immediately to ensure system safety. |
|---|
| स्रोत | ⚠️ https://github.com/jjjjj-zr/jjjjjzr/issues/6 |
|---|
| उपयोगकर्ता | jjjjjzr (UID 92774) |
|---|
| सबमिशन | 21/11/2025 02:27 PM (11 महीनों पहले) |
|---|
| संयम | 06/12/2025 06:34 PM (15 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 334617 [Verysync 微力同步 तक 2.21.3 Web Administration f96956469e7be39d सूचना का प्रकटीकरण] |
|---|
| अंक | 20 |
|---|