Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vmw7-gx6r-25fh

Опубликовано: 13 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code execution.

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code execution.

EPSS

Процентиль: 81%
0.01549
Низкий

8.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.8
nvd
почти 2 года назад

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1). The affected application allows users to upload arbitrary files via TFTP. This could allow an attacker to upload malicious firmware images or other files, that could potentially lead to remote code execution.

EPSS

Процентиль: 81%
0.01549
Низкий

8.8 High

CVSS3

Дефекты

CWE-434