Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-83rv-8xqm-r7w8

Опубликовано: 11 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

Command injection vulnerability in Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 allows attackers to execute arbitrary commands with root privileges through malicious domain names.

Command injection vulnerability in Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 allows attackers to execute arbitrary commands with root privileges through malicious domain names.

EPSS

Процентиль: 17%
0.00054
Низкий

7.3 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 7.3
nvd
около 2 месяцев назад

Command injection vulnerability in Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 allows attackers to execute arbitrary commands with root privileges through malicious domain names.

EPSS

Процентиль: 17%
0.00054
Низкий

7.3 High

CVSS3

Дефекты

CWE-77