Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jm9j-4c6r-hfr6

Опубликовано: 04 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary OS commands for devices to execute. Attackers abusing this dangerous functionality may issue all devices OS commands to execute, resulting in arbitrary remote command execution.

Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary OS commands for devices to execute. Attackers abusing this dangerous functionality may issue all devices OS commands to execute, resulting in arbitrary remote command execution.

EPSS

Процентиль: 79%
0.01265
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 9.8
nvd
больше 2 лет назад

Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary OS commands for devices to execute. Attackers abusing this dangerous functionality may issue all devices OS commands to execute, resulting in arbitrary remote command execution.

EPSS

Процентиль: 79%
0.01265
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-78