Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w5cm-m7c3-4jj4

Опубликовано: 16 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, remote attacker with low privileges to run commands as an Admin user.

This vulnerability is due to incorrect authorization verification by the HTTP server. An attacker could exploit this vulnerability by sending a malicious request to the web-based management interface. A successful exploit could allow the attacker to run commands as the Admin user.

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, remote attacker with low privileges to run commands as an Admin user.

This vulnerability is due to incorrect authorization verification by the HTTP server. An attacker could exploit this vulnerability by sending a malicious request to the web-based management interface. A successful exploit could allow the attacker to run commands as the Admin user.

EPSS

Процентиль: 48%
0.00245
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-250
CWE-863

Связанные уязвимости

CVSS3: 5.4
nvd
больше 1 года назад

A vulnerability in the web-based management interface of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, remote attacker with low privileges to run commands as an Admin user. This vulnerability is due to incorrect authorization verification by the HTTP server. An attacker could exploit this vulnerability by sending a malicious request to the web-based management interface. A successful exploit could allow the attacker to run commands as the Admin user.

CVSS3: 8.8
fstec
больше 1 года назад

Уязвимость веб-интерфейса управления микропрограммного обеспечения устройств IP-телефонии Cisco Analog Telephone Adapter (ATA) серии 190, позволяющая нарушителю выполнить команды от имени пользователя Admin

EPSS

Процентиль: 48%
0.00245
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-250
CWE-863