Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-82x6-h78j-2frc

Опубликовано: 04 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext to the serial console. This allows physically-proximate attackers to extract these active tokens to perform unauthorized operations via monitoring the serial UART interface.

GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext to the serial console. This allows physically-proximate attackers to extract these active tokens to perform unauthorized operations via monitoring the serial UART interface.

EPSS

Процентиль: 1%
0.00093
Низкий

7.1 High

CVSS3

Дефекты

CWE-312

Связанные уязвимости

CVSS3: 7.1
nvd
2 месяца назад

GNCC GP5 v7.1.76 was discovered to store pre-signed Backblaze B2 upload URLs (PUT requests) in plaintext to the serial console. This allows physically-proximate attackers to extract these active tokens to perform unauthorized operations via monitoring the serial UART interface.

EPSS

Процентиль: 1%
0.00093
Низкий

7.1 High

CVSS3

Дефекты

CWE-312