CVE-2022-29593

Опубликовано: 14 июл. 2022

Источник: nvd

CVSS3: 5.9

EPSS Низкий

Описание

relay_cgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post requests without the need for authentication or a valid signed/authorized request.

Ссылки

http://packetstormsecurity.com/files/167868/Dingtian-DT-R002-3.1.276A-Authentication-Bypass.html
Exploit
Third Party Advisory
VDB Entry
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2022-29593-authentication-bypass-by-capture-replay-dingtian-dt-r002/
Exploit
Third Party Advisory
https://www.trustwave.com/en-us/resources/security-resources/security-advisories/
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/167868/Dingtian-DT-R002-3.1.276A-Authentication-Bypass.html
Exploit
Third Party Advisory
VDB Entry
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2022-29593-authentication-bypass-by-capture-replay-dingtian-dt-r002/
Exploit
Third Party Advisory
https://www.trustwave.com/en-us/resources/security-resources/security-advisories/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dingtian-tech:dt-r004_firmware:3.1.276a:*:*:*:*:*:*:*

cpe:2.3:h:dingtian-tech:dt-r004:-:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08172

Низкий

5.9 Medium

CVSS3

Дефекты

CWE-294

Связанные уязвимости

GHSA-9522-4c39-hgpv

CVSS3: 5.9

github

больше 3 лет назад

relay_cgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post requests without the need for authentication or a valid signed/authorized request.

BDU:2022-07220

CVSS3: 5.9

fstec

почти 4 года назад

Уязвимость реализации сценария relay_cgi.cgi микропрограммного обеспечения релейных плат Dingtian DT-R002, позволяющая нарушителю обойти ограничения безопасности и получить полный контроль над устройством

EPSS

Процентиль: 92%

0.08172

Низкий

5.9 Medium

CVSS3

Дефекты

CWE-294