Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f83j-cwpw-wfxw

Опубликовано: 06 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2
CVSS3: 4.7

Описание

A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub_46409C of the file /msp_info.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub_46409C of the file /msp_info.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

EPSS

Процентиль: 91%
0.04755
Низкий

2 Low

CVSS4

4.7 Medium

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 4.7
nvd
11 месяцев назад

A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub_46409C of the file /msp_info.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

CVSS3: 4.7
fstec
11 месяцев назад

Уязвимость функции sub_46409C() файла /msp_info.htm?flag=qos микропрограммного обеспечения маршрутизаторов D-Link DI-7100G, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 91%
0.04755
Низкий

2 Low

CVSS4

4.7 Medium

CVSS3

Дефекты

CWE-74