Описание
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves updates scripts from the internet.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.3.11 (исключая)
Одновременно
cpe:2.3:o:amazon:blink_xt2_sync_module_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:amazon:blink_xt2_sync_module:-:*:*:*:*:*:*:*
EPSS
Процентиль: 87%
0.03317
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-78
Связанные уязвимости
github
больше 3 лет назад
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves updates scripts from the internet.
EPSS
Процентиль: 87%
0.03317
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-78