PT-2023-20996 · Unknown · Dualspace Super Secuirty

Publicado 2023-04-11 · Atualizado 2023-04-20 · CVE-2023-27192

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DUALSPACE Super Secuirty version 2.3.7

Description An issue in DUALSPACE Super Secuirty allows an attacker to cause a denial of service via the key wifi safe net check url, KEY Cirus scan whitelist, and KEY AD NEW USER AVOID TIME parameters.

Recommendations For version 2.3.7, consider restricting the use of the key wifi safe net check url, KEY Cirus scan whitelist, and KEY AD NEW USER AVOID TIME parameters to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2023-27192

Produtos afetados

Dualspace Super Secuirty

Referências · 7

• 🔥 https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27192/CVE%20detail.md · Exploit
• https://t.me/cibsecurity/61873 · Publicação no Telegram
• https://apkpure.com/cn/super-security-virus-cleaner/com.ludashi.security · Nota
• https://t.me/cvenotify/47998 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-27192 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-27192 · Aviso do Fabricante
• http://dualspace.com/pc/en/products.html · Nota