CNNVD-202512-4297 Information
CNNVD ID
CNNVD-202512-4297
Related CVE
- CNNVD Published: 2025-12-24
Description (Chinese)
Synaccess netBooter NP-02x和Synaccess netBooter NP-08x都是美国Synaccess公司的产品。Synaccess netBooter NP-02x是一款智能电源分配单元。Synaccess netBooter NP-08x是一款智能电源控制器。 Synaccess netBooter NP-02x和Synaccess netBooter NP-08x 6.8版本存在安全漏洞,该漏洞源于webNewAcct.cgi脚本缺少控制检查,可能导致身份验证绕过。
Description (English)
Synaaccess netBooter NP-02x and Syna access netBooter NP-08x are all United States company Synacess products. Synaaccess netBouter NP-02x is an intelligent power distribution unit. Synaaccess netBouter NP-08x is an intelligent power controller. There is a security loophole in version 6.8 of Synaaccess netBooter NP-02x and Syna access netBooter NP-08x, which stems from the lack of control checks in webNewAccct.cgi scripts, which may lead to a circumvention of identification.
Hazard Level
Low
Vulnerability Type
其他
Affected Vendor
Synaccess
Published
2025-12-24
Last Modified
2026-02-24
References
https://www.exploit-db.com/exploits/45920 https://www.synaccess-net.com https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5500.php
Share on: