CVE-2018-5782

Опубликовано: 14 мар. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Средний

Описание

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vsethost.php page. Successful exploit could allow an attacker to execute arbitrary PHP code within the context of the application.

Ссылки

https://github.com/twosevenzero/shoretel-mitel-rce
Product
Third Party Advisory
https://www.exploit-db.com/exploits/46174/
Exploit
Third Party Advisory
VDB Entry
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0004
Vendor Advisory
https://github.com/twosevenzero/shoretel-mitel-rce
Product
Third Party Advisory
https://www.exploit-db.com/exploits/46174/
Exploit
Third Party Advisory
VDB Entry
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0004
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mitel:connect_onsite:*:*:*:*:*:*:*:*

Версия до r1711-prem (включая)

cpe:2.3:a:mitel:st14.2:*:*:*:*:*:*:*:*

Версия до ga28 (включая)

EPSS

Процентиль: 97%

0.32341

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-f6hm-9chg-x5vg

CVSS3: 9.8

github

больше 3 лет назад

BDU:2018-00577

CVSS3: 10

fstec

почти 8 лет назад

Уязвимость компонента конференц-связи телекоммуникационных систем Mitel Connect OnSite и ST14.2, позволяющая нарушителю выполнить произвольный код