Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pq62-7rf2-mhcm

Опубликовано: 21 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

The AirVantage platform is vulnerable to an unauthorized attacker registering previously unregistered devices on the AirVantage platform when the owner has not disabled the AirVantage Management Service on the devices or registered the device. This could enable an attacker to configure, manage, and execute AT commands on an unsuspecting user’s devices.

The AirVantage platform is vulnerable to an unauthorized attacker registering previously unregistered devices on the AirVantage platform when the owner has not disabled the AirVantage Management Service on the devices or registered the device. This could enable an attacker to configure, manage, and execute AT commands on an unsuspecting user’s devices.

EPSS

Процентиль: 29%
0.00106
Низкий

8.1 High

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 8.1
nvd
около 1 года назад

The AirVantage platform is vulnerable to an unauthorized attacker registering previously unregistered devices on the AirVantage platform when the owner has not disabled the AirVantage Management Service on the devices or registered the device. This could enable an attacker to configure, manage, and execute AT commands on an unsuspecting user’s devices.

EPSS

Процентиль: 29%
0.00106
Низкий

8.1 High

CVSS3

Дефекты

CWE-287