Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jfrp-684p-p4j4

Опубликовано: 25 фев. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which will cause information leak and affect device operation.

There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which will cause information leak and affect device operation.

EPSS

Процентиль: 58%
0.00367
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 6.5
nvd
почти 4 года назад

There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attacker with specific permissions could modify the FTP access path to access and modify the system path contents without authorization, which will cause information leak and affect device operation.

EPSS

Процентиль: 58%
0.00367
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22