Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gm48-g823-rwch

Опубликовано: 12 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_cifssupport utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with root privileges.

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_cifssupport utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with root privileges.

EPSS

Процентиль: 53%
0.00304
Низкий

7.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7.8
nvd
почти 2 года назад

Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_cifssupport utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with root privileges.

CVSS3: 7.8
fstec
почти 2 года назад

Уязвимость утилиты svc_cifssupport операционной системы для систем хранения данных Dell Unity Operating Environment (OE), позволяющая нарушителю выполнить произвольные команды операционной системы с привилегиями root

EPSS

Процентиль: 53%
0.00304
Низкий

7.8 High

CVSS3

Дефекты

CWE-78