Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pvch-9x5f-vxhr

Опубликовано: 03 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device by executing a crafted CLI command.

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device by executing a crafted CLI command.

EPSS

Процентиль: 76%
0.00918
Низкий

7.2 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7.2
nvd
больше 1 года назад

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and USG FLEX series firmware versions from V4.60 through V5.38 could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device by executing a crafted CLI command.

CVSS3: 7.2
fstec
больше 1 года назад

Уязвимость микропрограммного обеспечения сетевых устройств Zyxel ATP, USG FLEX и USG FLEX 50(W)/USG20(W)-VPN, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 76%
0.00918
Низкий

7.2 High

CVSS3

Дефекты

CWE-78