Описание
The web configuration service of the affected device contains an authenticated command injection vulnerability. It can be used to execute system commands on the operating system (OS) from the device in the context of the user "root." If the attacker has credentials for the web service, then the device could be fully compromised.
Ссылки
- PatchThird Party AdvisoryUS Government Resource
- PatchThird Party AdvisoryUS Government Resource
Уязвимые конфигурации
Одновременно
EPSS
9 Critical
CVSS3
Дефекты
Связанные уязвимости
The web configuration service of the affected device contains an authenticated command injection vulnerability. It can be used to execute system commands on the operating system (OS) from the device in the context of the user "root." If the attacker has credentials for the web service, then the device could be fully compromised.
Уязвимость службы веб-конфигурации микропрограммного обеспечения маршрутизаторов Delta Electronics DX-2100-L1-CN, позволяющая нарушителю выполнить произвольный код
EPSS
9 Critical
CVSS3