Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4rmc-8hwg-q3v2

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. Authentication is required.

There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. Authentication is required.

EPSS

Процентиль: 99%
0.79167
Высокий

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 9.8
nvd
больше 5 лет назад

There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. Authentication is required.

EPSS

Процентиль: 99%
0.79167
Высокий

Дефекты

CWE-78