exploitDog

GHSA-5rm5-cw6f-p927

Опубликовано: 23 дек. 2022

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function. This vulnerability is exploited via a crafted GET request.

IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function. This vulnerability is exploited via a crafted GET request.

Ссылки

EPSS

Процентиль: 90%

0.0532

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-77

CWE-78

Связанные уязвимости

CVE-2022-45717

CVSS3: 9.8

nvd

около 3 лет назад

IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function. This vulnerability is exploited via a crafted GET request.

EPSS

Процентиль: 90%

0.0532

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-77

CWE-78