Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-3166

Опубликовано: 18 янв. 2021
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices. An attacker can upload arbitrary file content as a firmware update when the filename Settings_DSL-N14U-B1.trx is used. Once this file is loaded, shutdown measures on a wide range of services are triggered as if it were a real update, resulting in a persistent outage of those services.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:asus:dsl-n14u_b1_firmware:1.1.2.3_805:*:*:*:*:*:*:*
cpe:2.3:h:asus:dsl-n14u_b1:-:*:*:*:*:*:*:*

EPSS

Процентиль: 89%
0.04706
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 7.5
github
больше 3 лет назад

An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices. An attacker can upload arbitrary file content as a firmware update when the filename Settings_DSL-N14U-B1.trx is used. Once this file is loaded, shutdown measures on a wide range of services are triggered as if it were a real update, resulting in a persistent outage of those services.

EPSS

Процентиль: 89%
0.04706
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-434