Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5f22-h5m6-x6fq

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

/usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2(PSG1218) V22.5.9.163 devices allows remote authenticated users to execute any command via shell metacharacters in the cgi-bin/luci autoUpTime parameter.

/usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2(PSG1218) V22.5.9.163 devices allows remote authenticated users to execute any command via shell metacharacters in the cgi-bin/luci autoUpTime parameter.

EPSS

Процентиль: 95%
0.16616
Средний

Связанные уязвимости

CVSS3: 8.8
nvd
около 6 лет назад

/usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2(PSG1218) V22.5.9.163 devices allows remote authenticated users to execute any command via shell metacharacters in the cgi-bin/luci autoUpTime parameter.

EPSS

Процентиль: 95%
0.16616
Средний