Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3f2m-pjf9-h8qx

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges.

A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges.

EPSS

Процентиль: 99%
0.73422
Высокий

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7.2
nvd
около 5 лет назад

A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages and execute arbitrary OS commands with elevated privileges.

EPSS

Процентиль: 99%
0.73422
Высокий

Дефекты

CWE-78