Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pf38-5qmv-cmhv

Опубликовано: 05 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component ap_mode.cgi via the apmode_gateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component ap_mode.cgi via the apmode_gateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.

EPSS

Процентиль: 66%
0.00524
Низкий

8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 8
nvd
больше 1 года назад

Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component ap_mode.cgi via the apmode_gateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.

CVSS3: 8
fstec
больше 1 года назад

Уязвимость сценария ap_mode.cgi микропрограммного обеспечения маршрутизаторов NETGEAR R8500, XR300, R7000P и R6400 v2, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 66%
0.00524
Низкий

8 High

CVSS3

Дефекты

CWE-78