Описание
An issue in ASKEY router RTF3505VW-N1 BR_SV_g000_R3505VMN1001_s32_7 allows attackers to escalate privileges via running the tcpdump command after placing a crafted file in the /tmp directory and sending crafted packets through port 80.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:askey:rtf3505vw-n1_firmware:br_sv_g000_r3505vmn1001_s32_7:*:*:*:*:*:*:*
cpe:2.3:h:askey:rtf3505vw-n1:-:*:*:*:*:*:*:*
EPSS
Процентиль: 16%
0.00052
Низкий
7.8 High
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-276
Связанные уязвимости
CVSS3: 7.8
github
около 3 лет назад
An issue in ASKEY router RTF3505VW-N1 BR_SV_g000_R3505VMN1001_s32_7 allows attackers to escalate privileges via running the tcpdump command after placing a crafted file in the /tmp directory and sending crafted packets through port 80.
EPSS
Процентиль: 16%
0.00052
Низкий
7.8 High
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-276