exploitDog

GHSA-75rq-26mw-g7fp

Опубликовано: 20 янв. 2023

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function.

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function.

Ссылки

EPSS

Процентиль: 94%

0.14899

Средний

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-77

CWE-78

Связанные уязвимости

CVE-2022-48124

CVSS3: 9.8

nvd

около 3 лет назад

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function.

EPSS

Процентиль: 94%

0.14899

Средний

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-77

CWE-78