Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pf3m-qw97-hpvm

Опубликовано: 01 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 4.9

Описание

E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the underlying OS.

E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the underlying OS.

EPSS

Процентиль: 8%
0.00029
Низкий

6.9 Medium

CVSS4

4.9 Medium

CVSS3

Дефекты

CWE-1242

Связанные уязвимости

CVSS3: 4.9
nvd
5 месяцев назад

E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the underlying OS.

EPSS

Процентиль: 8%
0.00029
Низкий

6.9 Medium

CVSS4

4.9 Medium

CVSS3

Дефекты

CWE-1242