Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-95rh-674f-3m8c

Опубликовано: 01 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The /ajax/remove/ API is affected by a command injection vulnerability.

Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The /ajax/remove/ API is affected by a command injection vulnerability.

EPSS

Процентиль: 87%
0.0352
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/ajax/remove/` API is affected by a command injection vulnerability.

CVSS3: 9.1
fstec
больше 3 лет назад

Уязвимость реализации функции remove() микропрограммного обеспечения VPN-маршрутизаторов Robustel R1510, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 87%
0.0352
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-78