exploitDog

GHSA-jc8x-vpwq-c9g5

Опубликовано: 20 янв. 2023

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function.

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function.

Ссылки

EPSS

Процентиль: 94%

0.14899

Средний

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-77

CWE-78

Связанные уязвимости

CVE-2022-48126

CVSS3: 9.8

nvd

около 3 лет назад

TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function.

EPSS

Процентиль: 94%

0.14899

Средний

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-77

CWE-78