Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xvqh-5m2j-7624

Опубликовано: 23 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution. The issue occurs when the attacker sends an arbitrary code on "/diag_ping_admin.asp" to "PingTest" interface that leads to COMMAND EXECUTION. An attacker can successfully trigger the COMMAND and can compromise full system.

OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution. The issue occurs when the attacker sends an arbitrary code on "/diag_ping_admin.asp" to "PingTest" interface that leads to COMMAND EXECUTION. An attacker can successfully trigger the COMMAND and can compromise full system.

EPSS

Процентиль: 89%
0.04503
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 9.8
nvd
почти 3 года назад

OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution. The issue occurs when the attacker sends an arbitrary code on "/diag_ping_admin.asp" to "PingTest" interface that leads to COMMAND EXECUTION. An attacker can successfully trigger the COMMAND and can compromise full system.

EPSS

Процентиль: 89%
0.04503
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-77