Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3946-qxr3-66h7

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges.

A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges.

EPSS

Процентиль: 99%
0.44953
Средний

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7.2
nvd
почти 6 лет назад

A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges.

EPSS

Процентиль: 99%
0.44953
Средний

Дефекты

CWE-78