Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6g24-jp4w-4mmm

Опубликовано: 12 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system (OS) commands on an affected device by sending a crafted HTTP request.

A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system (OS) commands on an affected device by sending a crafted HTTP request.

EPSS

Процентиль: 35%
0.00144
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 6.8
nvd
около 1 года назад

A post-authentication command injection vulnerability in the CGI program in the Zyxel GS1900-48 switch firmware version V2.80(AAHN.1)C0 and earlier could allow an authenticated, LAN-based attacker with administrator privileges to execute some operating system (OS) commands on an affected device by sending a crafted HTTP request.

CVSS3: 6.8
fstec
около 1 года назад

Уязвимость интерфейса CGI микропрограммного обеспечения маршрутизаторов Zyxel серии GS1900, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 35%
0.00144
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-78