Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3cm3-qfjh-c5x9

Опубликовано: 13 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.5
CVSS3: 7.3

Описание

A flaw has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setUpgradeUboot of the file upgrade.so. This manipulation of the argument FileName causes os command injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.

A flaw has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setUpgradeUboot of the file upgrade.so. This manipulation of the argument FileName causes os command injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.

EPSS

Процентиль: 70%
0.01409
Низкий

5.5 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 7.3
nvd
4 месяца назад

A flaw has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setUpgradeUboot of the file upgrade.so. This manipulation of the argument FileName causes os command injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.

EPSS

Процентиль: 70%
0.01409
Низкий

5.5 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-77