CVE:CVE-2019-3702
CNNVD:CNNVD-201905-332
Lifesize Icon是美国Lifesize公司的一套视频会议系统。
Lifesize Icon LS_RM3_3.7.0 (2421)版本中的DNS Query Web UI存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
solution:Upgrade lifesize icon_300_firmware to a higher version than ls_rm3_3.7.0(2421,and avoid the version ls_rm3_3.7.0(2421); Upgrade lifesize icon_500_firmware to a higher version than ls_rm3_3.7.0(2421,and avoid the version ls_rm3_3.7.0(2421); Upgrade lifesize icon_700_firmware to a higher version than ls_rm3_3.7.0(2421,and avoid the version ls_rm3_3.7.0(2421)