漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Security issues in Intelligent Power Protector
Vulnerability Description
The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69.
CVSS Information
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Intelligent Power Protector 跨站脚本漏洞
Vulnerability Description
Intelligent Power Protector是一款智能电源软件。 Intelligent Power Protector 1.69之前版本存在安全漏洞,该漏洞源于IPP软件对某些资源输入验证不足。攻击者利用该漏洞访问本地子网和管理员交互才能破坏系统。
CVSS Information
N/A
Vulnerability Type
N/A