Описание
Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_name, ddns_pwd, h_ddns、ddns_host parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Ссылки
- Broken LinkExploitThird Party Advisory
- Broken LinkExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:commscope:arris_tr3300_firmware:1.0.13:*:*:*:*:*:*:*
cpe:2.3:h:commscope:arris_tr3300:-:*:*:*:*:*:*:*
EPSS
Процентиль: 84%
0.02327
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-77
Связанные уязвимости
CVSS3: 9.8
github
почти 4 года назад
Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_name, ddns_pwd, h_ddns?ddns_host parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
EPSS
Процентиль: 84%
0.02327
Низкий
9.8 Critical
CVSS3
10 Critical
CVSS2
Дефекты
CWE-77