🟠 《高危安全漏洞：CVE-2026-58477》

CVSS 评分: 高危（8.8）　　状态: Analyzed　　发布时间: 2026-07-14

漏洞描述

Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a mass assignment vulnerability that allows unauthenticated attackers to overwrite sensitive configuration settings by supplying arbitrary parameter names in HTTP requests. Attackers can manipulate parameters corresponding to sensitive values such as the passphrase and listening port, and can also achieve the same result through cross-site request forgery due to the absence of adequate request validation.

🔍 技术细节

字段 值
CVE ID CVE-2026-58477
CVSS 评分 8.8 🟠
严重程度 高危
CVSS 向量 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE 分类 CWE-915
发布时间 2026-07-14
最后更新 2026-07-14
状态 Analyzed
数据来源 disclosure@vulncheck.com

🔗 参考链接