Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cv67-v84q-6c9x

Опубликовано: 14 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

An external config control vulnerability exists in the nas.cgi set_nas() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

An external config control vulnerability exists in the nas.cgi set_nas() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

EPSS

Процентиль: 79%
0.01227
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-15

Связанные уязвимости

CVSS3: 9.1
nvd
около 1 года назад

An external config control vulnerability exists in the nas.cgi set_nas() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

EPSS

Процентиль: 79%
0.01227
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-15