Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6fhx-rwxq-vh8v

Опубликовано: 25 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of the ‘su’ binary file installed on the device that can be accessed through the ADB (Android Debug Bridge) protocol exposed on the network.

The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of the ‘su’ binary file installed on the device that can be accessed through the ADB (Android Debug Bridge) protocol exposed on the network.

EPSS

Процентиль: 32%
0.00125
Низкий

8.8 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 8.8
nvd
больше 2 лет назад

The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of the ‘su’ binary file installed on the device that can be accessed through the ADB (Android Debug Bridge) protocol exposed on the network.

EPSS

Процентиль: 32%
0.00125
Низкий

8.8 High

CVSS3

Дефекты

CWE-306