exploitDog

GHSA-qqhv-2h68-rx7f

Опубликовано: 26 авг. 2022

Источник: github

Github: Не прошло ревью

CVSS3: 7.8

Описание

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.

Ссылки

EPSS

Процентиль: 79%

0.01274

Низкий

7.8 High

CVSS3

CVE ID

Дефекты

CWE-77

Связанные уязвимости

CVE-2022-36460

CVSS3: 7.8

nvd

больше 3 лет назад

TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the FileName parameter in the function UploadFirmwareFile.

EPSS

Процентиль: 79%

0.01274

Низкий

7.8 High

CVSS3

CVE ID

Дефекты

CWE-77