Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xprr-92x5-gfg6

Опубликовано: 06 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Ubiquiti U7-Pro 7.0.35 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

Ubiquiti U7-Pro 7.0.35 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

EPSS

Процентиль: 23%
0.00074
Низкий

7.5 High

CVSS3

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 7.5
nvd
около 1 года назад

Ubiquiti U7-Pro 7.0.35 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: this is disputed by the Supplier because the observation only established that a password is present in a firmware image; however, the device cannot be deployed without setting a new password during installation.

EPSS

Процентиль: 23%
0.00074
Низкий

7.5 High

CVSS3

Дефекты

CWE-798