Описание
There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection.
Уязвимые конфигурации
Конфигурация 1Версия до mf286r_b07 (исключая)
Одновременно
cpe:2.3:o:zte:mf286r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:zte:mf286r:-:*:*:*:*:*:*:*
EPSS
Процентиль: 98%
0.51077
Средний
8.8 High
CVSS3
Дефекты
CWE-89
CWE-89
Связанные уязвимости
CVSS3: 8.8
github
около 3 лет назад
There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection.
EPSS
Процентиль: 98%
0.51077
Средний
8.8 High
CVSS3
Дефекты
CWE-89
CWE-89