Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q89c-2293-ppjp

Опубликовано: 29 янв. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [6] the dns_data->dns2 variable, that has the value of the dns2 parameter provided through the SetLocalLink API, is not validated properly. This would lead to an OS command injection.

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [6] the dns_data->dns2 variable, that has the value of the dns2 parameter provided through the SetLocalLink API, is not validated properly. This would lead to an OS command injection.

EPSS

Процентиль: 88%
0.03859
Низкий

7.2 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7.2
nvd
около 4 лет назад

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [6] the dns_data->dns2 variable, that has the value of the dns2 parameter provided through the SetLocalLink API, is not validated properly. This would lead to an OS command injection.

CVSS3: 8.8
fstec
около 4 лет назад

Уязвимость компонента SetLocalLink-dns2 микропрограммного обеспечения IP камеры Reolink RLC-410W, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 88%
0.03859
Низкий

7.2 High

CVSS3

Дефекты

CWE-78