Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f83j-cwpw-wfxw

Опубликовано: 06 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2
CVSS3: 4.7

Описание

A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub_46409C of the file /msp_info.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub_46409C of the file /msp_info.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

EPSS

Процентиль: 38%
0.00169
Низкий

2 Low

CVSS4

4.7 Medium

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 4.7
nvd
4 месяца назад

A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub_46409C of the file /msp_info.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

CVSS3: 4.7
fstec
4 месяца назад

Уязвимость функции sub_46409C() файла /msp_info.htm?flag=qos микропрограммного обеспечения маршрутизаторов D-Link DI-7100G, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 38%
0.00169
Низкий

2 Low

CVSS4

4.7 Medium

CVSS3

Дефекты

CWE-74