Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HIJACKING OF THE TOKEN AND GAINING ACCESS
Vulnerability Description
The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session detecting it. The web server allows the attacker to reuse an old session JWT token while the legitimate session is active.
CVSS Information
N/A
Vulnerability Type
不充分的会话过期机制
Vulnerability Title
Circutor TCPRS1plus 安全漏洞
Vulnerability Description
Circutor TCPRS1plus是西班牙Circutor公司的一款通信转换器。 Circutor TCPRS1plus存在安全漏洞，该漏洞源于Web服务器允许攻击者在合法会话活动期间重用旧的JWT令牌，可能导致会话劫持和安全参数修改。
CVSS Information
N/A
Vulnerability Type
N/A