Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xj9g-c23g-r4pj

Опубликовано: 16 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log into telnet and inject arbitrary OS commands, which can then be executed on the device.

Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log into telnet and inject arbitrary OS commands, which can then be executed on the device.

EPSS

Процентиль: 83%
0.01927
Низкий

8.8 High

CVSS3

Дефекты

CWE-78
CWE-798

Связанные уязвимости

CVSS3: 9.8
nvd
больше 1 года назад

Certain models of D-Link wireless routers do not properly validate user input in the telnet service, allowing unauthenticated remote attackers to use hard-coded credentials to log into telnet and inject arbitrary OS commands, which can then be executed on the device.

CVSS3: 9.8
fstec
больше 1 года назад

Уязвимость службы telnet беспроводных маршрутизаторов D-Link DIR-X4860, DIR-X5460A1 и COVR-X1870, позволяющая нарушителю получить несанкционированный доступ к конфиденциальной информации

EPSS

Процентиль: 83%
0.01927
Низкий

8.8 High

CVSS3

Дефекты

CWE-78
CWE-798