Dialogic Powermedia Xms Luki w zabezpieczeniach

Wersja

3.06
3.16
3.26
3.36
3.46

Przeciwdziałanie

Official Fix4
Temporary Fix0
Workaround0
Unavailable0
Not Defined6

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined10

Wektor dostępu

Not Defined0
Physical0
Local4
Adjacent0
Network6

Uwierzytelnianie

Not Defined0
High0
Low6
None4

Interakcja z użytkownikiem

Not Defined0
Required0
None10

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤60
≤76
≤84
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤60
≤78
≤82
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤50
≤66
≤72
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤86
≤92
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k2
<2k2
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

🔴 CTI Zajęcia

Affected Versions (7): 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 3.5 SU1

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2018-07-037.57.5Dialogic PowerMedia XMS Administrative Console sql injection$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2018-11643
2018-07-037.87.8Dialogic PowerMedia XMS Permission cleanzip.sh privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2018-11642
2018-07-038.58.5Dialogic PowerMedia XMS Administrative Console gatherLogs.php weak authentication$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2018-11641
2018-07-037.26.9Dialogic PowerMedia XMS Web Service XML External Entity$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-11640
2018-07-037.77.3Dialogic PowerMedia XMS Administrative Console verifyLogin.php privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-11639
2018-07-036.76.7Dialogic PowerMedia XMS Administrative Console privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2018-11638
2018-07-035.95.9Dialogic PowerMedia XMS Administrative Console information disclosure$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2018-11637
2018-07-037.07.0Dialogic PowerMedia XMS Administrative Console cross site request forgery$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2018-11636
2018-07-038.58.5Dialogic PowerMedia XMS Administrative Console config.php weak authentication$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2018-11635
2018-07-036.56.3Dialogic PowerMedia XMS Administrative Console default.db Password privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.06CVE-2018-11634

więcej wpisów autorstwa Dialogic

◂ PoprzedniPrzeglądKolejny ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!