| Название | Open source intranet penetration proxy server nps has unauthorized access vulnerability |
|---|
| Описание | NPS is an open-source lightweight, high-performance, and powerful intranet penetration proxy server. NPS is widely present in the internet, and there are unauthorized access vulnerabilities in NPS. Attackers can construct malicious data packets to call APIs, create, modify, and delete proxy tunnels, further exploiting them to threaten internal network security. The specific utilization details and vulnerability overview are presented in the submitted link. Due to security issues, vulnerability exploitation is second only to low-risk exploitation points. Please note that it can actually cause greater harm. |
|---|
| Источник | ⚠️ https://github.com/yinsel/CVE |
|---|
| Пользователь | yinsel975 (UID 54073) |
|---|
| Представление | 06.09.2023 17:48 (3 лет назад) |
|---|
| Модерация | 16.09.2023 08:52 (10 days later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 210249 [NPS до 0.26.9 Parameter Auth key/Timestamp слабая аутентификация] |
|---|
| Баллы | 0 |
|---|