Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6p5m-fhhh-365v

Опубликовано: 08 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Authenticated append-style command-injection Ruijie APs (AP_RGOS 11.1.x) allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the web_action.do endpoint.

Authenticated append-style command-injection Ruijie APs (AP_RGOS 11.1.x) allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the web_action.do endpoint.

EPSS

Процентиль: 24%
0.00081
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 7.2
nvd
2 месяца назад

Authenticated append-style command-injection Ruijie APs (AP_RGOS 11.1.x) allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the web_action.do endpoint.

EPSS

Процентиль: 24%
0.00081
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-77