Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7mq3-jhxf-cfj7

Опубликовано: 19 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "is_admin", "showConfig". Administrative Privileges which allows changing various configuration in the camera.

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "is_admin", "showConfig". Administrative Privileges which allows changing various configuration in the camera.

EPSS

Процентиль: 58%
0.00368
Низкий

8.8 High

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 8.2
nvd
больше 3 лет назад

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "is_admin", "showConfig". Administrative Privileges which allows changing various configuration in the camera.

EPSS

Процентиль: 58%
0.00368
Низкий

8.8 High

CVSS3

Дефекты

CWE-269