Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. It mishandles access control. This allows a remote attacker to access account information pages (including personal data) without being authenticated. The collected information includes the badge numbers that operate as user login names. They have a PIN code. The PIN code is 4 digits and thus can be guessed in 10000 brute force attempts.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DSK DSKNet 安全漏洞
Vulnerability Description
DSK DSKNet是日本DSK公司的一个数据交互程序。可以从连接到您网络的任何站点以交互方式访问他们的时间和考勤数据。 DSK DSKNet 2.16.136.0版本和2.17.136.5版本存在安全漏洞，该漏洞源于错误地处理了访问控制，这允许远程攻击者在没有经过身份验证的情况下访问账户信息页面（包括个人数据），收集的信息包括作为用户登录名操作的徽章编号，他们有一个PIN码，PIN码是4位数，因此可以在10000次暴力尝试中被猜到。
CVSS Information
N/A
Vulnerability Type
N/A