CVE-2022-32429

Опубликовано: 10 авг. 2022

Источник: nvd

CVSS3: 9.8

EPSS Высокий

Описание

An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technologies Inc MSNSwitch MNT.2408 allows unauthenticated attackers to arbitrarily configure settings within the application, leading to remote code execution.

Ссылки

http://packetstormsecurity.com/files/169819/MSNSwitch-Firmware-MNT.2408-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
https://elifulkerson.com/CVE-2022-32429/
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/169819/MSNSwitch-Firmware-MNT.2408-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
https://elifulkerson.com/CVE-2022-32429/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:megatech:msnswitch_firmware:mnt.2408:*:*:*:*:*:*:*

cpe:2.3:h:megatech:msnswitch:-:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.86991

Высокий

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

GHSA-rpf2-3hpw-c9qh