Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6fw8-3wxj-mg3j

Опубликовано: 08 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

Improper Input Validation vulnerability in a particular configuration setting field of Hitachi Energy TXpert Hub CoreTec 4 product, allows an attacker with access to an authorized user with ADMIN or ENGINEER role rights to inject an OS command that is executed by the system. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.

Improper Input Validation vulnerability in a particular configuration setting field of Hitachi Energy TXpert Hub CoreTec 4 product, allows an attacker with access to an authorized user with ADMIN or ENGINEER role rights to inject an OS command that is executed by the system. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.

EPSS

Процентиль: 36%
0.00155
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-20
CWE-78

Связанные уязвимости

CVSS3: 6.7
nvd
больше 3 лет назад

Improper Input Validation vulnerability in a particular configuration setting field of Hitachi Energy TXpert Hub CoreTec 4 product, allows an attacker with access to an authorized user with ADMIN or ENGINEER role rights to inject an OS command that is executed by the system. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1.

EPSS

Процентиль: 36%
0.00155
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-20
CWE-78