Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f2jw-4mh9-f63v

Опубликовано: 25 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Due to missing neutralization of special elements, OS commands can be injected via the update functionality of a TLS-SRP connection, which is normally used for configuring devices inside the mesh network. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.

Due to missing neutralization of special elements, OS commands can be injected via the update functionality of a TLS-SRP connection, which is normally used for configuring devices inside the mesh network. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.

EPSS

Процентиль: 23%
0.00314
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 9.8
nvd
4 месяца назад

Due to missing neutralization of special elements, OS commands can be injected via the update functionality of a TLS-SRP connection, which is normally used for configuring devices inside the mesh network. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.

EPSS

Процентиль: 23%
0.00314
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-78