Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 does not require authentication for (1) the "LOG." command, which allows remote attackers to create or overwrite arbitrary files; (2) the SETTINGSFILE command, which allows remote attackers to overwrite the ini file, and reconfigure VSAOD or cause a denial of service; or (3) the UNINSTALL command, which allows remote attackers to cause a denial of service (daemon shutdown). NOTE: vector 1 can be leveraged for code execution by writing to a Startup folder.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Visionsoft Audit 多个远程漏洞
Vulnerability Description
Visionsoft Audit 12.4.0.0版本的Demand Service (VSAOD)中的Visionsoft Audit没有要求(1)对"LOG." 指令的权限, 这会允许远程攻击者新建或重写任意文件; (2)对SETTINGSFILE 指令的权限, 这会允许远程攻击者重写ini文件, 并重新设置VSAOD或造成拒绝服务; 或(3)对UNINSTALL 指令的权限, 这会允许远程攻击者造成拒绝服务(后台程序倒闭). 注意：向量1可能会被进一步扩展来通过对一个Startup文件夹的写入来执行
CVSS Information
N/A
Vulnerability Type
N/A