Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-57r3-2prp-v2xh

Опубликовано: 23 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.

EPSS

Процентиль: 96%
0.28602
Средний

9.8 Critical

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 9.8
nvd
около 1 года назад

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.

CVSS3: 9.8
fstec
около 1 года назад

Уязвимость консоли управления устройствами (АМС) и центральной консоли управления (СМС) микропрограммного обеспечения межсетевых экранов SonicWall серии SMA 1000, позволяющая нарушителю выполнить произвольные команды операционной системы

EPSS

Процентиль: 96%
0.28602
Средний

9.8 Critical

CVSS3

Дефекты

CWE-502