Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mhr8-vxv5-m5v8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the affected device. A local attacker with high privilege may exploit the vulnerability to bypass integrity checks for software images and install a malicious software image on the affected device.

There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the affected device. A local attacker with high privilege may exploit the vulnerability to bypass integrity checks for software images and install a malicious software image on the affected device.

EPSS

Процентиль: 1%
0.00011
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 6.7
nvd
больше 6 лет назад

There is a digital signature verification bypass vulnerability in AR1200, AR1200-S, AR150, AR160, AR200, AR2200, AR2200-S, AR3200, SRG1300, SRG2300 and SRG3300 Huawei routers. The vulnerability is due to the affected software improperly verifying digital signatures for the software image in the affected device. A local attacker with high privilege may exploit the vulnerability to bypass integrity checks for software images and install a malicious software image on the affected device.

CVSS3: 6.7
fstec
почти 7 лет назад

Уязвимость маршрутизаторов Huawei, связанная с ошибками проверки цифровой подписи, позволяющая нарушителю установить вредоносный образ программного обеспечения

EPSS

Процентиль: 1%
0.00011
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-347