Описание
Improper Input validation vulnerability exists in Netis Korea D'live AP which could cause arbitrary command injection and execution when the time setting (using ntpServerlp1 parameter) for the users. This affects D'live set-top box AP(WF2429TB) v1.1.10.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:netu:wf2429tb_firmware:1.1.10:*:*:*:*:*:*:*
cpe:2.3:h:netu:wf2429tb:-:*:*:*:*:*:*:*
EPSS
Процентиль: 75%
0.00891
Низкий
6.4 Medium
CVSS3
6.6 Medium
CVSS3
6 Medium
CVSS2
Дефекты
CWE-20
CWE-20
Связанные уязвимости
github
больше 3 лет назад
Improper Input validation vulnerability exists in Netis Korea D'live AP which could cause arbitrary command injection and execution when the time setting (using ntpServerlp1 parameter) for the users. This affects D'live set-top box AP(WF2429TB) v1.1.10.
EPSS
Процентиль: 75%
0.00891
Низкий
6.4 Medium
CVSS3
6.6 Medium
CVSS3
6 Medium
CVSS2
Дефекты
CWE-20
CWE-20