Описание
There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. Authentication is required.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party Advisory
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.9.0 (включая)
cpe:2.3:a:midasolutions:eframework:*:*:*:*:*:*:*:*
EPSS
Процентиль: 99%
0.79167
Высокий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-78
Связанные уязвимости
github
больше 3 лет назад
There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. Authentication is required.
EPSS
Процентиль: 99%
0.79167
Высокий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-78