Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9pj2-2xqq-q73h

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response.

The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response.

EPSS

Процентиль: 66%
0.00504
Низкий

Связанные уязвимости

nvd
больше 11 лет назад

The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response.

EPSS

Процентиль: 66%
0.00504
Низкий