Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7cxv-6x8v-9gmq

Опубликовано: 03 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.

The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.

EPSS

Процентиль: 22%
0.00069
Низкий

7.2 High

CVSS3

Дефекты

CWE-829

Связанные уязвимости

CVSS3: 7.2
nvd
больше 2 лет назад

The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.

EPSS

Процентиль: 22%
0.00069
Низкий

7.2 High

CVSS3

Дефекты

CWE-829