Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4prj-w93p-4j89

Опубликовано: 25 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter. This allows authenticated users to execute commands, with root privileges, on the operating system.

In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter. This allows authenticated users to execute commands, with root privileges, on the operating system.

EPSS

Процентиль: 82%
0.01745
Низкий

8.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 8.8
nvd
около 2 лет назад

In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter. This allows authenticated users to execute commands, with root privileges, on the operating system.

EPSS

Процентиль: 82%
0.01745
Низкий

8.8 High

CVSS3

Дефекты

CWE-78