Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-27fp-c3m4-phwv

Опубликовано: 22 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 5.3
CVSS3: 6.3

Описание

A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been classified as critical. This affects the function setTracerouteCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been classified as critical. This affects the function setTracerouteCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 86%
0.02799
Низкий

5.3 Medium

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 6.3
nvd
больше 1 года назад

A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been classified as critical. This affects the function setTracerouteCfg. The manipulation leads to os command injection. It is possible to initiate the attack remotely. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 8.8
fstec
больше 1 года назад

Уязвимость функции setTracerouteCfg() микропрограммного обеспечения роутеров TOTOLINK AC1200 T8, позволяющая нарушителю выполнить произвольную команду

EPSS

Процентиль: 86%
0.02799
Низкий

5.3 Medium

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-78