Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3hhh-hv27-4gjh

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It contains an execute_cmd.cgi feature (that is not reachable via the web user interface) that lets an authenticated user execute Operating System commands.

An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It contains an execute_cmd.cgi feature (that is not reachable via the web user interface) that lets an authenticated user execute Operating System commands.

EPSS

Процентиль: 100%
0.89067
Высокий

8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 8
nvd
около 5 лет назад

An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It contains an execute_cmd.cgi feature (that is not reachable via the web user interface) that lets an authenticated user execute Operating System commands.

CVSS3: 8
fstec
больше 5 лет назад

Уязвимость реализации сценария «cgi-bin/execute_cmd.cgi» микропрограммного обеспечения маршрутизаторов D-Link DSL-2888A, позволяющая нарушителю выполнять произвольные команды

EPSS

Процентиль: 100%
0.89067
Высокий

8 High

CVSS3

Дефекты

CWE-78