| Title | Open source intranet penetration proxy server nps has unauthorized access vulnerability |
|---|
| Description | NPS is an open-source lightweight, high-performance, and powerful intranet penetration proxy server. NPS is widely present in the internet, and there are unauthorized access vulnerabilities in NPS. Attackers can construct malicious data packets to call APIs, create, modify, and delete proxy tunnels, further exploiting them to threaten internal network security. The specific utilization details and vulnerability overview are presented in the submitted link. Due to security issues, vulnerability exploitation is second only to low-risk exploitation points. Please note that it can actually cause greater harm. |
|---|
| Source | ⚠️ https://github.com/yinsel/CVE |
|---|
| User | yinsel975 (UID 54073) |
|---|
| Submission | 09/06/2023 17:48 (3 years ago) |
|---|
| Moderation | 09/16/2023 08:52 (10 days later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 210249 [NPS up to 0.26.9 Parameter Auth key/Timestamp improper authentication] |
|---|
| Points | 0 |
|---|