CNNVD-202510-780 Information

CNNVD ID

CNNVD-202510-780

CVE-2025-60967

  • CNNVD Published: 2025-10-06

Description (Chinese)

EndRun Technologies Sonoma D12 Network Time Server是美国EndRun Technologies公司的一款时间同步设备。 EndRun Technologies Sonoma D12 Network Time Server 4.00版本存在安全漏洞,该漏洞源于容易受到跨站脚本攻击,可能导致敏感信息泄露。

Description (English)

EndRun Technologies Sonoma D12 Network Times Server is a time-synchronized device of the United States company EndRun Technologies. There is a security loophole in the EndRun Technologies Sonoma D12 Network Times Server 4.00, which stems from the vulnerability to cross-site script attacks and may lead to the disclosure of sensitive information.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

EndRun Technologies

Published

2025-10-06

Last Modified

2026-02-24

References

http://endrun.com http://sonoma.com https://xdiv-sec.github.io/vulnerability-research/advisories/2025-10-03-sonoma-d12

Share on: