exploitDog

CVE-2018-15356

Опубликовано: 17 авг. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0.

Ссылки

https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-012-eltex-esp-200-router-command-injection/
Mitigation
Third Party Advisory
US Government Resource
VDB Entry
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-012-eltex-esp-200-router-command-injection/
Mitigation
Third Party Advisory
US Government Resource
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:eltex:esp-200_firmware:1.2.0:*:*:*:*:*:*:*

cpe:2.3:h:eltex:esp-200:-:*:*:*:*:*:*:*

EPSS

Процентиль: 54%

0.00308

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-77

Связанные уязвимости

GHSA-j343-hmxq-f9pg

CVSS3: 8.8

github

больше 3 лет назад

An authenticated attacker can execute arbitrary code using command ejection in Eltex ESP-200 firmware version 1.2.0.

EPSS

Процентиль: 54%

0.00308

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-77