Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2jw2-w8hc-jqch

Опубликовано: 14 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

EPSS

Процентиль: 82%
0.01751
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-15

Связанные уязвимости

CVSS3: 9.1
nvd
около 1 года назад

An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

EPSS

Процентиль: 82%
0.01751
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-15