Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x2v2-mj6c-wfp3

Опубликовано: 20 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

fake_upload.cgi on the Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution as root. 

fake_upload.cgi on the Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution as root. 

EPSS

Процентиль: 88%
0.04132
Низкий

8.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.8
nvd
больше 2 лет назад

fake_upload.cgi on the Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution as root. 

EPSS

Процентиль: 88%
0.04132
Низкий

8.8 High

CVSS3

Дефекты

CWE-434