| शीर्षक | Yottamaster DM200 V1.2.23 Vertical Privilege Escalation |
|---|
| विवरण | An improper access control vulnerability exists in multiple Yottamaster NAS devices, including DM2 (version equal to or prior to V1.9.12), DM3 (version equal to or prior to V1.9.12), and DM200 (version equal to or prior to V1.2.23). This vulnerability is caused by the lack of directory traversal checks, and can lead to unauthorized file operations through the renaming feature. Attackers can exploit this vulnerability to achieve both horizontal and vertical privilege escalation. |
|---|
| स्रोत | ⚠️ https://www.notion.so/2b76cf4e528a80f6ae50fe21b13ff0b8 |
|---|
| उपयोगकर्ता | rgyue (UID 92984) |
|---|
| सबमिशन | 26/11/2025 05:43 AM (11 महीनों पहले) |
|---|
| संयम | 07/12/2025 04:36 PM (11 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 334666 [Yottamaster DM2/DM3/DM200 तक 1.2.23/1.9.12 File Upload निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 17 |
|---|