Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hh37-xhg2-x62w

Опубликовано: 21 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.6
CVSS3: 9.9

Описание

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

EPSS

Процентиль: 73%
0.01514
Низкий

8.6 High

CVSS4

9.9 Critical

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 9.9
nvd
24 дня назад

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET&section=ntp_timezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

EPSS

Процентиль: 73%
0.01514
Низкий

8.6 High

CVSS4

9.9 Critical

CVSS3

Дефекты

CWE-74