Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7q22-vf3p-qvwp

Опубликовано: 13 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless access point and the known passphrase of FSSPORTS, an attacker could use this service to modify a device and steal intellectual property.

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless access point and the known passphrase of FSSPORTS, an attacker could use this service to modify a device and steal intellectual property.

EPSS

Процентиль: 33%
0.00128
Низкий

8 High

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 8
nvd
больше 3 лет назад

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless access point and the known passphrase of FSSPORTS, an attacker could use this service to modify a device and steal intellectual property.

EPSS

Процентиль: 33%
0.00128
Низкий

8 High

CVSS3

Дефекты

CWE-276