Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4q82-9j8m-c42w

Опубликовано: 08 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 8.4

Описание

devolo dLAN Cockpit 4.3.1 contains an unquoted service path vulnerability in the 'DevoloNetworkService' that allows local non-privileged users to potentially execute arbitrary code. Attackers can exploit the insecure service path configuration by inserting malicious code in the system root path to execute with elevated privileges during application startup or system reboot.

devolo dLAN Cockpit 4.3.1 contains an unquoted service path vulnerability in the 'DevoloNetworkService' that allows local non-privileged users to potentially execute arbitrary code. Attackers can exploit the insecure service path configuration by inserting malicious code in the system root path to execute with elevated privileges during application startup or system reboot.

EPSS

Процентиль: 2%
0.00014
Низкий

8.5 High

CVSS4

8.4 High

CVSS3

Дефекты

CWE-428

Связанные уязвимости

CVSS3: 8.4
nvd
около 1 месяца назад

devolo dLAN Cockpit 4.3.1 contains an unquoted service path vulnerability in the 'DevoloNetworkService' that allows local non-privileged users to potentially execute arbitrary code. Attackers can exploit the insecure service path configuration by inserting malicious code in the system root path to execute with elevated privileges during application startup or system reboot.

EPSS

Процентиль: 2%
0.00014
Низкий

8.5 High

CVSS4

8.4 High

CVSS3

Дефекты

CWE-428