漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
In Yeastar N412 and N824 Configuration Panel 42.x and 45.x, an unauthenticated attacker can create backup file and download it, revealing admin hash, allowing, once cracked, to login inside the Configuration Panel, otherwise, replacing the hash in the archive and restoring it on the device which will change admin password granting access to the device.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Yeastar N412和Yeastar N824 安全漏洞
Vulnerability Description
Yeastar N412和Yeastar N824都是西班牙Yeastar公司的一款易于使用且价格低廉的电话系统。 Yeastar N412 和N824 Configuration Panel 42.x版本和45.x版本存在安全漏洞,该漏洞源于未经认证的攻击者可以创建备份文件并下载,暴露出管理员的哈希值,一旦破解,就可以登录配置面板,否则就可以替换存档中的哈希值并在设备上恢复,这将改变管理员密码,从而获得对设备的访问权。
CVSS Information
N/A
Vulnerability Type
N/A