exploitDog

CVE-2022-37057

Опубликовано: 28 авг. 2022

Источник: nvd

CVSS3: 9.8

EPSS Средний

Описание

D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Command Injection via cgibin, ssdpcgi_main.

Ссылки

https://drive.google.com/file/d/1_UUpraFTxxB97ujrgVLQZXQ8Q8M58BAF/view?usp=sharing
Exploit
Patch
Third Party Advisory
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10308
Vendor Advisory
https://www.dlink.com/en/security-bulletin/
Vendor Advisory
https://drive.google.com/file/d/1_UUpraFTxxB97ujrgVLQZXQ8Q8M58BAF/view?usp=sharing
Exploit
Patch
Third Party Advisory
https://www.dlink.com/en/security-bulletin/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dlink:go-rt-ac750_firmware:2.00b02:*:*:*:*:*:*:*

cpe:2.3:h:dlink:go-rt-ac750:revision_b:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:dlink:go-rt-ac750_firmware:1.01b03:*:*:*:*:*:*:*

cpe:2.3:h:dlink:go-rt-ac750:revision_a:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.31821

Средний

9.8 Critical

CVSS3

Дефекты

CWE-78

Связанные уязвимости

GHSA-8jw9-7jrj-wp3f

CVSS3: 9.8

github

больше 3 лет назад

D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Command Injection via cgibin, ssdpcgi_main.

EPSS

Процентиль: 97%

0.31821

Средний

9.8 Critical

CVSS3

Дефекты

CWE-78