Описание
An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to command execution. An attacker can send a malicious packet to trigger this vulnerability.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:milesight:milesightvpn:2.0.2:*:*:*:*:*:*:*
EPSS
Процентиль: 48%
0.00248
Низкий
8.1 High
CVSS3
Дефекты
CWE-77
CWE-78
Связанные уязвимости
CVSS3: 8.1
github
больше 2 лет назад
An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to command execution. An attacker can send a malicious packet to trigger this vulnerability.
EPSS
Процентиль: 48%
0.00248
Низкий
8.1 High
CVSS3
Дефекты
CWE-77
CWE-78