exploitDog

CVE-2013-4658

Опубликовано: 25 окт. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share.

Ссылки

https://www.ise.io/casestudies/exploiting-soho-routers/
Third Party Advisory
https://www.ise.io/soho_service_hacks/
Exploit
Third Party Advisory
https://www.ise.io/wp-content/uploads/2017/06/soho_defcon21.pdf
Third Party Advisory
https://www.ise.io/casestudies/exploiting-soho-routers/
Third Party Advisory
https://www.ise.io/soho_service_hacks/
Exploit
Third Party Advisory
https://www.ise.io/wp-content/uploads/2017/06/soho_defcon21.pdf
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:linksys:ea6500_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:linksys:ea6500:-:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.00612

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-98vv-hgmp-w5h7

CVSS3: 9.8

github

почти 4 года назад

Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share.

EPSS

Процентиль: 69%

0.00612

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-22