Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mxmx-r6p4-736h

Опубликовано: 11 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.7

Описание

The authenticated time setting capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS.

The authenticated time setting capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS.

EPSS

Процентиль: 62%
0.00423
Низкий

8.7 High

CVSS4

Дефекты

CWE-78

Связанные уязвимости

nvd
11 месяцев назад

The authenticated time setting capability of the firmware for Mennekes Smart / Premium Chargingpoints can be abused for command execution because OS command are improperly neutralized when certain fields are passed to the underlying OS.

EPSS

Процентиль: 62%
0.00423
Низкий

8.7 High

CVSS4

Дефекты

CWE-78