exploitDog

CVE-2021-37317

Опубликовано: 03 фев. 2023

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on the target for COPY and MOVE operations.

Ссылки

https://robertchen.cc/blog/2021/03/31/asus-rce
Exploit
Mitigation
Third Party Advisory
https://robertchen.cc/blog/2021/03/31/asus-rce
Exploit
Mitigation
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:asus:rt-ac68u_firmware:*:*:*:*:*:*:*:*

Версия до 3.0.0.4.386.41634 (исключая)

cpe:2.3:h:asus:rt-ac68u:-:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00821

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-22

CWE-22

Связанные уязвимости

GHSA-53c9-q26h-r9v2

CVSS3: 9.1

github

около 3 лет назад

Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to write arbitrary files via improper sanitation on the target for COPY and MOVE operations.

EPSS

Процентиль: 74%

0.00821

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-22

CWE-22