Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p7q5-cvw2-cc4p

Опубликовано: 09 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.9

Описание

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to access the underlying operating system as the root user.

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to access the underlying operating system as the root user.

EPSS

Процентиль: 77%
0.0102
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-77
CWE-78

Связанные уязвимости

CVSS3: 9.9
nvd
больше 2 лет назад

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to access the underlying operating system as the root user.

CVSS3: 9.9
fstec
больше 2 лет назад

Уязвимость микропрограммного обеспечения промышленных коммутаторов Siemens Scalance LPE9403, связанная с возможностью внедрения команд, позволяющая нарушителю выполнить произвольный код в контексте root-пользователя

EPSS

Процентиль: 77%
0.0102
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-77
CWE-78