Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5h82-g2m2-rmrv

Опубликовано: 01 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The /action/import_https_cert_file/ API is affected by command injection vulnerability.

Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The /action/import_https_cert_file/ API is affected by command injection vulnerability.

EPSS

Процентиль: 87%
0.0352
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/action/import_https_cert_file/` API is affected by command injection vulnerability.

CVSS3: 9.1
fstec
больше 3 лет назад

Уязвимость реализации функции import_https_cert_file() микропрограммного обеспечения VPN-маршрутизаторов Robustel R1510, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 87%
0.0352
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-78