Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7c88-698j-qxf8

Опубликовано: 14 мая 2024
Источник: github
Github: Не прошло ревью
CVSS4: 6.8
CVSS3: 4.6

Описание

This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by identifying UART pins and accessing the root shell on the vulnerable system.

Successful exploitation of this vulnerability could allow the attacker to access the sensitive information on the targeted system.

This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by identifying UART pins and accessing the root shell on the vulnerable system.

Successful exploitation of this vulnerability could allow the attacker to access the sensitive information on the targeted system.

EPSS

Процентиль: 88%
0.03711
Низкий

6.8 Medium

CVSS4

4.6 Medium

CVSS3

Дефекты

CWE-1191

Связанные уязвимости

CVSS3: 4.6
nvd
больше 1 года назад

This vulnerability exists in Digisol Router (DG-GR1321: Hardware version 3.7L; Firmware version : v3.2.02) due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by identifying UART pins and accessing the root shell on the vulnerable system. Successful exploitation of this vulnerability could allow the attacker to access the sensitive information on the targeted system.

EPSS

Процентиль: 88%
0.03711
Низкий

6.8 Medium

CVSS4

4.6 Medium

CVSS3

Дефекты

CWE-1191