Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v4g7-hcw8-gwmg

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An unauthenticated attacker can interact with the service API by using a backdoor value as the Authorization header.

Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An unauthenticated attacker can interact with the service API by using a backdoor value as the Authorization header.

EPSS

Процентиль: 100%
0.89451
Высокий

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 9.8
nvd
больше 5 лет назад

Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An unauthenticated attacker can interact with the service API by using a backdoor value as the Authorization header.

EPSS

Процентиль: 100%
0.89451
Высокий

Дефекты

CWE-798