Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2h22-6qr3-qgp2

Опубликовано: 04 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the SUID executable binary in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an authenticated local attacker with administrator privileges to execute some system commands as the “root” user on a vulnerable device.

** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the SUID executable binary in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an authenticated local attacker with administrator privileges to execute some system commands as the “root” user on a vulnerable device.

EPSS

Процентиль: 50%
0.00267
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 6.7
nvd
больше 1 года назад

** UNSUPPORTED WHEN ASSIGNED ** The improper privilege management vulnerability in the SUID executable binary in Zyxel NAS326 firmware versions before V5.21(AAZF.17)C0 and NAS542 firmware versions before V5.21(ABAG.14)C0 could allow an authenticated local attacker with administrator privileges to execute some system commands as the “root” user on a vulnerable device.

CVSS3: 6.7
fstec
больше 1 года назад

Уязвимость микропрограммного обеспечения сетевых хранилищ Zyxel NAS326 и Zyxel NAS542, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить свои привилегии и выполнить произвольные команды

EPSS

Процентиль: 50%
0.00267
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-269