Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p2qr-6gqg-ph48

Опубликовано: 31 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9

Описание

The web configuration service of the affected device contains an authenticated command injection vulnerability. It can be used to execute system commands on the operating system (OS) from the device in the context of the user "root." If the attacker has credentials for the web service, then the device could be fully compromised.

The web configuration service of the affected device contains an authenticated command injection vulnerability. It can be used to execute system commands on the operating system (OS) from the device in the context of the user "root." If the attacker has credentials for the web service, then the device could be fully compromised.

EPSS

Процентиль: 46%
0.00237
Низкий

9 Critical

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 9
nvd
почти 3 года назад

The web configuration service of the affected device contains an authenticated command injection vulnerability. It can be used to execute system commands on the operating system (OS) from the device in the context of the user "root." If the attacker has credentials for the web service, then the device could be fully compromised.

CVSS3: 9
fstec
около 3 лет назад

Уязвимость службы веб-конфигурации микропрограммного обеспечения маршрутизаторов Delta Electronics DX-2100-L1-CN, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 46%
0.00237
Низкий

9 Critical

CVSS3

Дефекты

CWE-79