Описание
Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command, which is accessible with the username guest and password guest.
Ссылки
- ProductVendor Advisory
- ExploitThird Party Advisory
- ProductVendor Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:hongdian:h8922_firmware:3.0.5:*:*:*:*:*:*:*
cpe:2.3:h:hongdian:h8922:-:*:*:*:*:*:*:*
EPSS
Процентиль: 100%
0.92677
Критический
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-78
Связанные уязвимости
github
больше 3 лет назад
Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command, which is accessible with the username guest and password guest.
EPSS
Процентиль: 100%
0.92677
Критический
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-78