CVE-2023-26800

Опубликовано: 26 мар. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function.

Ссылки

https://github.com/winmt/my-vuls/tree/main/RG-EW1200
Exploit
Third Party Advisory
https://github.com/winmt/my-vuls/tree/main/RG-EW1200
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:ruijienetworks:rg-ew1200r_firmware:ew_3.0\(1\)b11p204:*:*:*:*:*:*:*

cpe:2.3:h:ruijienetworks:rg-ew1200r:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:ruijienetworks:rg-ew1200_firmware:ew_3.0\(1\)b11p204:*:*:*:*:*:*:*

cpe:2.3:h:ruijienetworks:rg-ew1200:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:ruijienetworks:rg-ew1200g_pro_firmware:ew_3.0\(1\)b11p204:*:*:*:*:*:*:*

cpe:2.3:h:ruijienetworks:rg-ew1200g_pro:-:*:*:*:*:*:*:*

EPSS

Процентиль: 40%

0.00186

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-77

Связанные уязвимости

GHSA-7p5g-53rx-5g9w

CVSS3: 9.8

github

почти 3 года назад

Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function.

EPSS

Процентиль: 40%

0.00186

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-77