exploitDog

GHSA-v4f2-wgpx-3p85

Опубликовано: 06 окт. 2022

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi.

TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi.

Ссылки

EPSS

Процентиль: 94%

0.14899

Средний

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-77

Связанные уязвимости

CVE-2022-41518

CVSS3: 9.8

nvd

больше 3 лет назад

TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the UploadFirmwareFile function at /cgi-bin/cstecgi.cgi.

EPSS

Процентиль: 94%

0.14899

Средний

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-77