Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6mx5-j85j-5862

Опубликовано: 16 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, appear to be fed directly into a system call or other similar function. This allows any authenticated user to execute arbitrary commands on the device.

The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, appear to be fed directly into a system call or other similar function. This allows any authenticated user to execute arbitrary commands on the device.

EPSS

Процентиль: 47%
0.00243
Низкий

7.8 High

CVSS3

Дефекты

CWE-77
CWE-78

Связанные уязвимости

CVSS3: 7.8
nvd
около 3 лет назад

The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, appear to be fed directly into a system call or other similar function. This allows any authenticated user to execute arbitrary commands on the device.

EPSS

Процентиль: 47%
0.00243
Низкий

7.8 High

CVSS3

Дефекты

CWE-77
CWE-78