Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2r38-xghh-6j8m

Опубликовано: 12 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality.

In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality.

EPSS

Процентиль: 94%
0.13948
Средний

9.8 Critical

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 лет назад

In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality.

EPSS

Процентиль: 94%
0.13948
Средний

9.8 Critical

CVSS3

Дефекты

CWE-74