漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Stack-Based Buffer Overflow in TFTP File-Transfer Command Handling over CLI
Vulnerability Description
A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by supplying unexpected or oversized filename input. Exploitation results in the corruption of the internal buffer, causing the CLI and web dashboard to become unavailable and leading to a denial of service.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
栈缓冲区溢出
Vulnerability Title
PHOENIX CONTACT FL NAT 安全漏洞
Vulnerability Description
PHOENIX CONTACT FL NAT是德国菲尼克斯电气(PHOENIX CONTACT)公司的一系列工业安全网关。 PHOENIX CONTACT FL NAT存在安全漏洞,该漏洞源于CLI的TFTP文件传输命令处理中存在基于栈的缓冲区溢出,可能导致低权限攻击者造成内存损坏,引发拒绝服务。以下产品受到影响:FL NAT 2008、FL NAT 2208、FL NAT 2304-2GC-2SFP、FL SWITCH 2005、FL SWITCH 2008和FL SWITCH 2008F。
CVSS Information
N/A
Vulnerability Type
N/A