CVE-2025-63206: Ds2924 Firmware: kritik işlevde kimlik doğrulaması eksik

Açıklama (NVD)

An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware versions 1.01.18 and 1.02.00, allowing attackers to gain escalated privileges via storing crafted cookies in the web browser.

Özet bilgiler

Ürün

Dasannetworks Ds2924 Firmware

CVSS v3.1

9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,57 (yüzdelik 47)

CWE

CWE-306

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• dasansmc.com
• github.com
• github.com
• CWE-306