Intelbras SG 2404 PoE L2+に脆弱性、修正版あり
Summary
Intelbras SG 2404 PoE L2+のWeb管理画面に認証の不備があり、ネットワーク越しに機器を不正に操作されるおそれがあります。攻撃手法も公開済みなので、該当版を使う組織は修正版へ更新し、管理画面に届く範囲も絞ってください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
Intelbras SG 2404 PoE L2+のWeb管理画面に認証の不備があり、ネットワーク越しに機器を不正に操作されるおそれがあります。攻撃手法も公開済みなので、該当版を使う組織は修正版へ更新し、管理画面に届く範囲も絞ってください。
Original description The description as published by the source.
A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknown function of the file /EXCU_SHELL of the component Web Management Interface. Executing a manipulation can lead to improper authentication. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 1.00.74 is sufficient to fix this issue. Upgrading the affected component is advised.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web cna@vuldb.com
- web cna@vuldb.com
- web cna@vuldb.com
- web cna@vuldb.com
- web nvd.nist.gov
- web github.com