Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8p9j-879p-799j

Опубликовано: 19 мая 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

EnGenius ENH500 AP 2T2R V3.0 FW3.7.22 is vulnerable to Incorrect Access Control via the password change function. The device fails to validate the current password, allowing an attacker to submit a password change request with an invalid current password and set a new password.

EnGenius ENH500 AP 2T2R V3.0 FW3.7.22 is vulnerable to Incorrect Access Control via the password change function. The device fails to validate the current password, allowing an attacker to submit a password change request with an invalid current password and set a new password.

EPSS

Процентиль: 29%
0.00106
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 6.5
nvd
9 месяцев назад

EnGenius ENH500 AP 2T2R V3.0 FW3.7.22 is vulnerable to Incorrect Access Control via the password change function. The device fails to validate the current password, allowing an attacker to submit a password change request with an invalid current password and set a new password.

EPSS

Процентиль: 29%
0.00106
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-284