漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Unauthenticated Server Side Request Forgery (SSRF) via WS-Addressing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.
Vulnerability Description
An unauthenticated attacker may perform a limited server side request forgery (SSRF), forcing the target device to open a TCP connection to an arbitrary port number on an arbitrary IP address. This SSRF leverages the WS-Addressing ReplyTo element in a Web service (HTTP TCP port 80) SOAP request. The attacker can not control the data sent in the SSRF connection, nor can the attacker receive any data back. This SSRF is suitable for TCP port scanning of an internal network when the Web service (HTTP TCP port 80) is exposed across a network segment.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
服务端请求伪造(SSRF)
Vulnerability Title
Brother Industries多款产品 安全漏洞
Vulnerability Description
Brother Industries HL-L8360CDW等都是日本Brother Industries公司的产品。Brother Industries HL-L8360CDW是一款多功能打印机。Brother Industries debut web server是一款 web 服务器。Brother Industries Web Based Management是一款 Web 管理软件。 Brother Industries多款产品存在安全漏洞,该漏洞源于未经验证的攻击者可通过WS-Addressi
CVSS Information
N/A
Vulnerability Type
N/A