Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7246-m99m-q4pq

Опубликовано: 25 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference, daemon crash, and Captive Portal outage) via a GET request to /opennds_auth/ that lacks a custom query string parameter and client-token.

OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference, daemon crash, and Captive Portal outage) via a GET request to /opennds_auth/ that lacks a custom query string parameter and client-token.

EPSS

Процентиль: 12%
0.00041
Низкий

7.5 High

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 2 лет назад

OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference, daemon crash, and Captive Portal outage) via a GET request to /opennds_auth/ that lacks a custom query string parameter and client-token.

CVSS3: 7.5
nvd
около 2 лет назад

OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference, daemon crash, and Captive Portal outage) via a GET request to /opennds_auth/ that lacks a custom query string parameter and client-token.

CVSS3: 7.5
debian
около 2 лет назад

OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other p ...

EPSS

Процентиль: 12%
0.00041
Низкий

7.5 High

CVSS3

Дефекты

CWE-476