提交 #441817: IPC Systems, Inc IPC Unigy™ Management System 04.03.00.08.0027 Server-Side Request Forgery (SSRF)信息

标题IPC Systems, Inc IPC Unigy™ Management System 04.03.00.08.0027 Server-Side Request Forgery (SSRF)
描述A Server-Side Request Forgery (SSRF) vulnerability has been identified in the IPC Unigy™ Management System, allowing a remote attacker to send arbitrary HTTP requests to internal and external resources through the vulnerable system. This issue affects Unigy™ Version 04.03.00.08.0027, COP Version 03.00.01.00.0018, and OS Patch Version 06.00.00.34.0008. The vendor has been contacted regarding this vulnerability, with continuous follow-up attempts over the past 6 months, successfully reaching the technical team. As of now, no CVE has been assigned for this issue, and it has not been submitted to another CNA.
来源⚠️ https://github.com/br484/br484.github.io/blob/main/archives/WEB/CVE%20-%20IPC%20Unigy%20-%20ingles.md
用户
 braga (UID 69991)
提交2024-11-12 00時19分 (2 年前)
管理2024-11-22 13時55分 (11 days later)
状态已接受
VulDB条目285841 [IPC Unigy Management System 04.03.00.08.0027 HTTP Request 权限提升]
积分20

Do you know our Splunk app?

Download it now for free!