exploitDog

GHSA-3qv8-4pm7-wp59

Опубликовано: 12 фев. 2022

Источник: github

Github: Не прошло ревью

Описание

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31.

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31.

Ссылки

EPSS

Процентиль: 79%

0.01309

Низкий

CVE ID

Связанные уязвимости

CVE-2021-39280

CVSS3: 8.8

nvd

около 4 лет назад

Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31.

EPSS

Процентиль: 79%

0.01309

Низкий

CVE ID