Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5gfv-6mr8-g7x2

Опубликовано: 22 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the mainfunction.cgi dumpSyslog 'option' parameter allowing an authenticated attacker with access to the web management interface to delete arbitrary files. Vigor2960 is no longer supported.

Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the mainfunction.cgi dumpSyslog 'option' parameter allowing an authenticated attacker with access to the web management interface to delete arbitrary files. Vigor2960 is no longer supported.

EPSS

Процентиль: 55%
0.00321
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 6.5
nvd
около 2 лет назад

** UNSUPPORTED WHEN ASSIGNED ** Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the mainfunction.cgi dumpSyslog 'option' parameter allowing an authenticated attacker with access to the web management interface to delete arbitrary files. Vigor2960 is no longer supported.

EPSS

Процентиль: 55%
0.00321
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22