Описание
Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain multiple command injection vulnerabilities in the function setIPsecTunnelList via the IPsecLocalNet and IPsecRemoteNet parameters.
Ссылки
- ExploitTechnical DescriptionThird Party Advisory
- ExploitThird Party Advisory
- ExploitTechnical DescriptionThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:tenda:w15e_firmware:15.11.0.10\(1576\):*:*:*:*:*:*:*
cpe:2.3:h:tenda:w15e:2.0:*:*:*:*:*:*:*
EPSS
Процентиль: 82%
0.01626
Низкий
7.8 High
CVSS3
Дефекты
CWE-78
CWE-78
Связанные уязвимости
CVSS3: 7.8
github
около 3 лет назад
Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain multiple command injection vulnerabilities in the function setIPsecTunnelList via the IPsecLocalNet and IPsecRemoteNet parameters.
EPSS
Процентиль: 82%
0.01626
Низкий
7.8 High
CVSS3
Дефекты
CWE-78
CWE-78