CVE-2013-2612

Опубликовано: 27 янв. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

Command-injection vulnerability in Huawei E587 3G Mobile Hotspot 11.203.27 allows remote attackers to execute arbitrary shell commands with root privileges due to an error in the Web UI.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/85782
Third Party Advisory
VDB Entry
https://www.securityfocus.com/bid/61167/info
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/85782
Third Party Advisory
VDB Entry
https://www.securityfocus.com/bid/61167/info
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:huawei:e587_firmware:11.203.27:*:*:*:*:*:*:*

cpe:2.3:h:huawei:e587:-:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05717

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

GHSA-h4f8-93hw-pp9f

github

почти 4 года назад