CNVD-2015-05335
Vulnerability from cnvd - Published: 2015-09-18
VLAI Severity ?
Title
锐捷网络NPE网络出口引擎最高软件版本存在授权绕过漏洞
Description
NPE 50 E是锐捷网络研发的一款针对国内网络出口的专用设备。
锐捷网络NPE网络出口引擎最高软件版本存在授权绕过漏洞，允许攻击者利用此漏洞获取敏感信息。
Severity
中
Patch Name
锐捷网络NPE网络出口引擎最高软件版本存在授权绕过漏洞（需登陆前提）
Patch Description
CNVD确认所述情况，已由CNVD通过软件生产厂商（或网站管理方）公开联系渠道向其邮件（和电话）通报，由其后续提供解决方案并协调相关用户单位处置。
Formal description
增加对配置文件的房屋权限控制。
Impacted products
| Name | 锐捷网络 NPE 50 E Release(179170) |
|---|
{
"description": "NPE 50 E\u662f\u9510\u6377\u7f51\u7edc\u7814\u53d1\u7684\u4e00\u6b3e\u9488\u5bf9\u56fd\u5185\u7f51\u7edc\u51fa\u53e3\u7684\u4e13\u7528\u8bbe\u5907\u3002\r\n\r\n\u9510\u6377\u7f51\u7edcNPE\u7f51\u7edc\u51fa\u53e3\u5f15\u64ce\u6700\u9ad8\u8f6f\u4ef6\u7248\u672c\u5b58\u5728\u6388\u6743\u7ed5\u8fc7\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u5229\u7528\u6b64\u6f0f\u6d1e\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002",
"discovererName": "\u5f20\u5409\u826f\u3001\u8d75\u67cf\u660c\u3001\u738b\u5efa\u52c7\u3001\u738b\u5ef6\u6ce2\u3001\u674e\u5c71\u3001\u674e\u6625\u9e4f\u3001\u674e\u6587\u8f69\u3001\u5f90\u5f6c\u3001\u5f90\u6587\u8d85\u3002",
"formalWay": "\u589e\u52a0\u5bf9\u914d\u7f6e\u6587\u4ef6\u7684\u623f\u5c4b\u6743\u9650\u63a7\u5236\u3002",
"isEvent": "\u4e8b\u4ef6\u578b\u6f0f\u6d1e",
"number": "CNVD-2015-05335",
"openTime": "2015-09-18",
"patchDescription": "CNVD\u786e\u8ba4\u6240\u8ff0\u60c5\u51b5\uff0c\u5df2\u7531CNVD\u901a\u8fc7\u8f6f\u4ef6\u751f\u4ea7\u5382\u5546\uff08\u6216\u7f51\u7ad9\u7ba1\u7406\u65b9\uff09\u516c\u5f00\u8054\u7cfb\u6e20\u9053\u5411\u5176\u90ae\u4ef6\uff08\u548c\u7535\u8bdd\uff09\u901a\u62a5\uff0c\u7531\u5176\u540e\u7eed\u63d0\u4f9b\u89e3\u51b3\u65b9\u6848\u5e76\u534f\u8c03\u76f8\u5173\u7528\u6237\u5355\u4f4d\u5904\u7f6e\u3002",
"patchName": "\u9510\u6377\u7f51\u7edcNPE\u7f51\u7edc\u51fa\u53e3\u5f15\u64ce\u6700\u9ad8\u8f6f\u4ef6\u7248\u672c\u5b58\u5728\u6388\u6743\u7ed5\u8fc7\u6f0f\u6d1e\uff08\u9700\u767b\u9646\u524d\u63d0\uff09",
"products": {
"product": "\u9510\u6377\u7f51\u7edc NPE 50 E Release(179170)"
},
"serverity": "\u4e2d",
"submitTime": "2015-08-03",
"title": "\u9510\u6377\u7f51\u7edcNPE\u7f51\u7edc\u51fa\u53e3\u5f15\u64ce\u6700\u9ad8\u8f6f\u4ef6\u7248\u672c\u5b58\u5728\u6388\u6743\u7ed5\u8fc7\u6f0f\u6d1e"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…