Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3rpw-c8rg-p3f5

Опубликовано: 29 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the write privilege intends.

Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the write privilege intends.

EPSS

Процентиль: 36%
0.00152
Низкий

7.2 High

CVSS3

Дефекты

CWE-77
CWE-78

Связанные уязвимости

CVSS3: 7.2
nvd
больше 1 года назад

Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive than what the write privilege intends.

EPSS

Процентиль: 36%
0.00152
Низкий

7.2 High

CVSS3

Дефекты

CWE-77
CWE-78