Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r29c-758h-f3vf

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

In Hunesion i-oneNet version 3.0.7 ~ 3.0.53 and 4.0.4 ~ 4.0.16, due to the lack of update file integrity checking in the upgrade process, an attacker can craft malicious file and use it as an update.

In Hunesion i-oneNet version 3.0.7 ~ 3.0.53 and 4.0.4 ~ 4.0.16, due to the lack of update file integrity checking in the upgrade process, an attacker can craft malicious file and use it as an update.

EPSS

Процентиль: 27%
0.00096
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-345

Связанные уязвимости

CVSS3: 5.5
nvd
больше 6 лет назад

In Hunesion i-oneNet version 3.0.7 ~ 3.0.53 and 4.0.4 ~ 4.0.16, due to the lack of update file integrity checking in the upgrade process, an attacker can craft malicious file and use it as an update.

EPSS

Процентиль: 27%
0.00096
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-345