Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4crj-f4f5-7mhf

Опубликовано: 09 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 8.8

Описание

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are vulnerable to command injection due to missing server side input sanitation when loading VxLAN configurations. This could allow an authenticated attacker to execute arbitrary code with root privileges.

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are vulnerable to command injection due to missing server side input sanitation when loading VxLAN configurations. This could allow an authenticated attacker to execute arbitrary code with root privileges.

EPSS

Процентиль: 85%
0.02591
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 8.8
nvd
больше 1 года назад

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are vulnerable to command injection due to missing server side input sanitation when loading VxLAN configurations. This could allow an authenticated attacker to execute arbitrary code with root privileges.

CVSS3: 8.8
fstec
больше 1 года назад

Уязвимость клиента VPN-сервиса SINEMA Remote Connect, связанная с непринятием мер по чистке данных на управляющем уровне, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 85%
0.02591
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-77