Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fmc4-v39v-phr8

Опубликовано: 26 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 9.3
CVSS3: 9.8

Описание

A vulnerability classified as critical has been found in TOTOLINK T10 AC1200 4.1.8cu.5207. Affected is an unknown function of the file /squashfs-root/web_cste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as critical has been found in TOTOLINK T10 AC1200 4.1.8cu.5207. Affected is an unknown function of the file /squashfs-root/web_cste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 54%
0.00309
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 9.8
nvd
больше 1 года назад

A vulnerability classified as critical has been found in TOTOLINK T10 AC1200 4.1.8cu.5207. Affected is an unknown function of the file /squashfs-root/web_cste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 9.8
fstec
больше 1 года назад

Уязвимость файла /squashfs-root/web_cste/cgi-bin/product.ini микропрограммного обеспечения маршрутизаторов TOTOLink T10, позволяющая нарушителю получить несанкционированный доступ к службе Telnet

EPSS

Процентиль: 54%
0.00309
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-798