Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Mirasys.Common.Utils.Security.DataCrypt method in Common.dll in AuditTrailService in SMServer.exe. This method triggers insecure deserialization within the .NET garbage collector, in which a gadget (contained in a serialized object) may be executed with SYSTEM privileges. The attacker must properly encrypt the object; however, the hardcoded keys are available.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mirasys Video Management System 代码问题漏洞
Vulnerability Description
Mirasys Video Management System（VMS）是芬兰Mirasys公司的一套监控视频管理系统。 Mirasys VMS 7.6.1之前版本和8.3.2之前的8.x版本存在安全漏洞，该漏洞源于程序没有正确处理Common.dll库的Mirasys.Common.Utils.Security.DataCrypt方法。
CVSS Information
N/A
Vulnerability Type
N/A