Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-93h8-h74w-vwcw

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit the vulnerability to connect to affected devices and execute a series of commands.Affected product versions include:Secospace AntiDDoS8000 versions V500R001C00,V500R001C20,V500R001C60,V500R005C00.

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit the vulnerability to connect to affected devices and execute a series of commands.Affected product versions include:Secospace AntiDDoS8000 versions V500R001C00,V500R001C20,V500R001C60,V500R005C00.

EPSS

Процентиль: 59%
0.00378
Низкий

Связанные уязвимости

CVSS3: 8.1
nvd
почти 6 лет назад

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit the vulnerability to connect to affected devices and execute a series of commands.Affected product versions include:Secospace AntiDDoS8000 versions V500R001C00,V500R001C20,V500R001C60,V500R005C00.

CVSS3: 5.6
fstec
почти 6 лет назад

Уязвимость микропрограммного обеспечения маршрутизаторов Huawei, связанная с недостатками аутентификации, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 59%
0.00378
Низкий