Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wgp7-3rwh-vpgw

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actions with the permissions of the user on the Sunny WebBox Firmware Version 1.6 and prior. This device uses IP addresses to maintain communication after a successful login, which would increase the ease of exploitation.

An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actions with the permissions of the user on the Sunny WebBox Firmware Version 1.6 and prior. This device uses IP addresses to maintain communication after a successful login, which would increase the ease of exploitation.

EPSS

Процентиль: 36%
0.00151
Низкий

8.8 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8.8
nvd
больше 6 лет назад

An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actions with the permissions of the user on the Sunny WebBox Firmware Version 1.6 and prior. This device uses IP addresses to maintain communication after a successful login, which would increase the ease of exploitation.

CVSS3: 8.8
fstec
больше 6 лет назад

Уязвимость микропрограммного обеспечения системы удалённого управления солнечными батареями SMA Solar Sunny WebBox, связанная с подделкой межсайтовых запросов, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 36%
0.00151
Низкий

8.8 High

CVSS3

Дефекты

CWE-352