Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3946-qxr3-66h7

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges.

A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges.

EPSS

Процентиль: 99%
0.73422
Высокий

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7.2
nvd
около 5 лет назад

A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges.

EPSS

Процентиль: 99%
0.73422
Высокий

Дефекты

CWE-78