Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6x6f-2749-hhgv

Опубликовано: 18 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.9

Описание

DLINK - DSL-224 Post-auth PCE. DLINK router has an interface where you can configure NTP servers (Network Time Protocol) via jsonrpc API. It is possible to inject a command through this interface that will run with ROOT permissions on the router.

DLINK - DSL-224 Post-auth PCE. DLINK router has an interface where you can configure NTP servers (Network Time Protocol) via jsonrpc API. It is possible to inject a command through this interface that will run with ROOT permissions on the router.

EPSS

Процентиль: 63%
0.0044
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 9.9
nvd
около 3 лет назад

DLINK - DSL-224 Post-auth RCE. DLINK router version 3.0.8 has an interface where you can configure NTP servers (Network Time Protocol) via jsonrpc API. It is possible to inject a command through this interface that will run with ROOT permissions on the router.

EPSS

Процентиль: 63%
0.0044
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-77