Описание
An issue was discovered on GL.iNet devices running firmware before 3.216. There is an arbitrary file write in which an empty file can be created almost anywhere on the filesystem, as long as the filename and path is no more than 6 characters (the working directory is /www).
Ссылки
- ExploitThird Party Advisory
- Product
- ExploitThird Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1Версия до 3.215 (включая)
Одновременно
cpe:2.3:o:gl-inet:gl-mv1000w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:gl-inet:gl-mv1000w:-:*:*:*:*:*:*:*
Конфигурация 2Версия до 3.215 (включая)
Одновременно
cpe:2.3:o:gl-inet:gl-mv1000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:gl-inet:gl-mv1000:-:*:*:*:*:*:*:*
EPSS
Процентиль: 25%
0.00089
Низкий
7.5 High
CVSS3
7.5 High
CVSS3
Дефекты
CWE-77
CWE-77
Связанные уязвимости
CVSS3: 7.5
github
больше 2 лет назад
An issue was discovered on GL.iNet devices running firmware before 3.216. There is an arbitrary file write in which an empty file can be created almost anywhere on the filesystem, as long as the filename and path is no more than 6 characters (the working directory is /www).
EPSS
Процентиль: 25%
0.00089
Низкий
7.5 High
CVSS3
7.5 High
CVSS3
Дефекты
CWE-77
CWE-77