Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vq87-xfrv-42wp

Опубликовано: 10 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an attacker on the local area network (with specific permissions) to upload and execute malicious files, potentially leading to unauthorized system access.

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an attacker on the local area network (with specific permissions) to upload and execute malicious files, potentially leading to unauthorized system access.

EPSS

Процентиль: 27%
0.00097
Низкий

8.8 High

CVSS3

Дефекты

CWE-552

Связанные уязвимости

CVSS3: 8.8
nvd
около 1 года назад

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an attacker on the local area network (with specific permissions) to upload and execute malicious files, potentially leading to unauthorized system access.

EPSS

Процентиль: 27%
0.00097
Низкий

8.8 High

CVSS3

Дефекты

CWE-552