Описание
D-Link DSL-GS225 J1 AU_1.0.4 devices allow an admin to execute OS commands by placing shell metacharacters after a supported CLI command, as demonstrated by ping -c1 127.0.0.1; cat/etc/passwd. The CLI is reachable by TELNET.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до au_1.0.4 (включая)
Одновременно
cpe:2.3:o:dlink:dsl-gs225_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dsl-gs225:j1:*:*:*:*:*:*:*
EPSS
Процентиль: 73%
0.00788
Низкий
7.2 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-78
Связанные уязвимости
github
больше 3 лет назад
D-Link DSL-GS225 J1 AU_1.0.4 devices allow an admin to execute OS commands by placing shell metacharacters after a supported CLI command, as demonstrated by ping -c1 127.0.0.1; cat/etc/passwd. The CLI is reachable by TELNET.
EPSS
Процентиль: 73%
0.00788
Низкий
7.2 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-78