Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-63hw-pp24-qp9g

Опубликовано: 14 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.

A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.

EPSS

Процентиль: 25%
0.00086
Низкий

7.8 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.8
nvd
почти 3 года назад

A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions < V2.85.43). Affected devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileges.

CVSS3: 7.8
fstec
почти 3 года назад

Уязвимость интерфейса командной строки интегрированных контроллеров IP-доступа SiPass, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 25%
0.00086
Низкий

7.8 High

CVSS3

Дефекты

CWE-20