提出 #204679: Open source intranet penetration proxy server nps has unauthorized access vulnerability情報

タイトルOpen source intranet penetration proxy server nps has unauthorized access vulnerability
説明NPS is an open-source lightweight, high-performance, and powerful intranet penetration proxy server. NPS is widely present in the internet, and there are unauthorized access vulnerabilities in NPS. Attackers can construct malicious data packets to call APIs, create, modify, and delete proxy tunnels, further exploiting them to threaten internal network security. The specific utilization details and vulnerability overview are presented in the submitted link. Due to security issues, vulnerability exploitation is second only to low-risk exploitation points. Please note that it can actually cause greater harm.
ソース⚠️ https://github.com/yinsel/CVE
ユーザー
 yinsel975 (UID 54073)
送信2023年09月06日 17:48 (3 年 ago)
モデレーション2023年09月16日 08:52 (10 days later)
ステータス重複
VulDBエントリ210249 [NPS 迄 0.26.9 Parameter Auth key/Timestamp 弱い認証]
ポイント0

Want to know what is going to be exploited?

We predict KEV entries!