Описание
Cradlepoint IBR900-600 devices running versions < 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line.
Ссылки
- ProductVendor Advisory
- ExploitThird Party Advisory
- ProductVendor Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 7.21.0 (исключая)
Одновременно
cpe:2.3:o:cradlepoint:ibr600c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:cradlepoint:ibr600c:-:*:*:*:*:*:*:*
Конфигурация 2Версия до 7.21.0 (исключая)
Одновременно
cpe:2.3:o:cradlepoint:ibr600_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:cradlepoint:ibr600:-:*:*:*:*:*:*:*
Конфигурация 3Версия до 7.21.0 (исключая)
Одновременно
cpe:2.3:o:cradlepoint:ibr900_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:cradlepoint:ibr900:-:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.00367
Низкий
7.5 High
CVSS3
7.8 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
A restricted shell escape sequence is possible on Cradlepoint IBR900-600 7.2.60 devices that can lead to an attacker denying the availability of all console or SSH command-line access.
EPSS
Процентиль: 58%
0.00367
Низкий
7.5 High
CVSS3
7.8 High
CVSS2
Дефекты
NVD-CWE-Other