Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f83j-6rqj-vhpw

Опубликовано: 18 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 2.3

Описание

A vulnerability classified as problematic has been found in TOTOLINK N200RE 9.3.5u.6255_B20211224. Affected is an unknown function of the file /squashfs-root/etc_ro/custom.conf of the component Telnet Service. The manipulation leads to password in configuration file. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-229374 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as problematic has been found in TOTOLINK N200RE 9.3.5u.6255_B20211224. Affected is an unknown function of the file /squashfs-root/etc_ro/custom.conf of the component Telnet Service. The manipulation leads to password in configuration file. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-229374 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 7%
0.00028
Низкий

2.3 Low

CVSS3

Дефекты

CWE-260

Связанные уязвимости

CVSS3: 2.3
nvd
больше 2 лет назад

A vulnerability classified as problematic has been found in TOTOLINK N200RE 9.3.5u.6255_B20211224. Affected is an unknown function of the file /squashfs-root/etc_ro/custom.conf of the component Telnet Service. The manipulation leads to password in configuration file. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-229374 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 5.5
fstec
больше 2 лет назад

Уязвимость файла /squashfs-root/etc_ro/custom.conf службы Telnet микропрограммного обеспечения маршрутизаторов TOTOLINK N200RE, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 7%
0.00028
Низкий

2.3 Low

CVSS3

Дефекты

CWE-260