Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in URVE Build 24.03.2020. Using the _internal/pc/shutdown.php path, it is possible to shutdown the system. Among others, the following files and scripts are also accessible: _internal/pc/abort.php, _internal/pc/restart.php, _internal/pc/vpro.php, _internal/pc/wake.php, _internal/error_u201409.txt, _internal/runcmd.php, _internal/getConfiguration.php, ews/autoload.php, ews/del.php, ews/mod.php, ews/sync.php, utils/backup/backup_server.php, utils/backup/restore_server.php, MyScreens/timeline.config, kreator.html5/test.php, and addedlogs.txt.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Urve 访问控制错误漏洞
Vulnerability Description
Urve是英国Urve公司的一个用于预约会议室/客房的设备。该设备可支持与MS Exchange,Lotus,Office 365,Google日历和其他系统的集成用于支持会议室、客房的预定。 URVE Build 24.03.2020 存在访问控制错误漏洞,该漏洞源于使用内部pc shutdown.php路径,可以关闭系统。以下文件和脚本也可访问:_internal/pc/abort.php, _internal/pc/restart.php, _internal/pc/vpro.php, _inter
CVSS Information
N/A
Vulnerability Type
N/A