Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-frm2-vmcc-vghq

Опубликовано: 28 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 8.8

Описание

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device compromise.

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device compromise.

EPSS

Процентиль: 79%
0.01868
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 8.8
nvd
около 2 месяцев назад

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device compromise.

EPSS

Процентиль: 79%
0.01868
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-78