Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gv3h-6f48-rrfp

Опубликовано: 05 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlg_adv.cgi via the apmode_gateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlg_adv.cgi via the apmode_gateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.

EPSS

Процентиль: 50%
0.00271
Низкий

8 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 8
nvd
больше 1 года назад

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlg_adv.cgi via the apmode_gateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.

CVSS3: 8
fstec
больше 1 года назад

Уязвимость сценария wlg_adv.cgi микропрограммного обеспечения маршрутизаторов Netgear R8500, XR300, R7000P и R6400 v2, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 50%
0.00271
Низкий

8 High

CVSS3

Дефекты

CWE-77