Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gh66-hfff-5mf9

Опубликовано: 12 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 9.4
CVSS3: 9.1

Описание

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate input sent to specific endpoints of its web API. This could allow an authenticated remote attacker with high privileges on the application to execute arbitrary code on the underlying OS.

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate input sent to specific endpoints of its web API. This could allow an authenticated remote attacker with high privileges on the application to execute arbitrary code on the underlying OS.

EPSS

Процентиль: 85%
0.02364
Низкий

9.4 Critical

CVSS4

9.1 Critical

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 9.1
nvd
около 1 года назад

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate input sent to specific endpoints of its web API. This could allow an authenticated remote attacker with high privileges on the application to execute arbitrary code on the underlying OS.

CVSS3: 9.1
fstec
около 1 года назад

Уязвимость веб-интерфейса управления программного обеспечения для управления сетевой инфраструктурой SINEC INS (Infrastructure Network Services), связанная с неправильной проверкой входных данных, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 85%
0.02364
Низкий

9.4 Critical

CVSS4

9.1 Critical

CVSS3

Дефекты

CWE-78