Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qc7c-4556-qm66

Опубликовано: 25 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection, which are ultimately run as the root user. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.

Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection, which are ultimately run as the root user. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.

EPSS

Процентиль: 22%
0.00071
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 9.8
nvd
2 месяца назад

Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection, which are ultimately run as the root user. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.

EPSS

Процентиль: 22%
0.00071
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-78