Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-95r9-qccg-f3gc

Опубликовано: 30 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, allowing unauthenticated remote attackers to download and upload firmware and system configurations, ultimately gaining full control of the devices.

Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, allowing unauthenticated remote attackers to download and upload firmware and system configurations, ultimately gaining full control of the devices.

EPSS

Процентиль: 81%
0.0152
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 9.8
nvd
больше 1 года назад

Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, allowing unauthenticated remote attackers to download and upload firmware and system configurations, ultimately gaining full control of the devices.

CVSS3: 9.8
fstec
больше 1 года назад

Уязвимость функции загрузки и скачивания микропрограммного обеспечения коммутаторов PLANET Technology, позволяющая нарушителю обойти процесс аутентификации и выполнить произвольный код

EPSS

Процентиль: 81%
0.0152
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-306