漏洞标题
N/A
漏洞描述信息
CWE-668: 存在一个资源错位的暴露漏洞,该漏洞在产品网络接口上暴露了一个SSH接口。这并不允许直接利用产品或执行任何非预期的操作,因为SSH接口的访问受到身份验证机制的保护。影响仅限于端口扫描、指纹识别活动以及尝试对暴露的SSH接口发起潜在的拒绝服务攻击。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
将资源暴露给错误范围
漏洞标题
N/A
漏洞描述信息
CWE-668: Exposure of the Resource Wrong Sphere vulnerability exists that exposes a SSH
interface over the product network interface. This does not allow to directly exploit the product or
make any unintended operation as the SSH interface access is protected by an authentication
mechanism. Impacts are limited to port scanning and fingerprinting activities as well as attempts
to perform a potential denial of service attack on the exposed SSH interface.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
漏洞类别
将资源暴露给错误范围
漏洞标题
Schneider Electric EVlink Home Smart 安全漏洞
漏洞描述信息
Schneider Electric EVlink Home Smart是法国施耐德电气(Schneider Electric)公司的一种智能家用电动汽车充电器。 Schneider Electric EVlink Home Smart v2.0.4.1.2_131版本和v2.0.3.8.2_128版本存在安全漏洞,该漏洞源于存在资源错误域漏洞,可能导致潜在的拒绝服务攻击。
CVSS信息
N/A
漏洞类别
其他