Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-83rg-r6p3-c2jp

Опубликовано: 17 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabilities via the LocalIPAddress, TCPPorts, and UDPPorts parameters in the SetPortForwardingSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.

D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabilities via the LocalIPAddress, TCPPorts, and UDPPorts parameters in the SetPortForwardingSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.

EPSS

Процентиль: 41%
0.00186
Низкий

8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 8
nvd
больше 1 года назад

D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabilities via the LocalIPAddress, TCPPorts, and UDPPorts parameters in the SetPortForwardingSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request.

CVSS3: 8
fstec
больше 1 года назад

Уязвимость функции SetPortForwardingSettings() сценария prog.cgi микропрограммного обеспечения маршрутизаторов D-Link DIR-878 и DIR-882, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 41%
0.00186
Низкий

8 High

CVSS3

Дефекты

CWE-78