Описание
RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted payload and escalate privileges allowing execution of any commands on the remote system.
Уязвимые конфигурации
Конфигурация 1Версия до 1.36.33 (включая)
cpe:2.3:a:zoneminder:zoneminder:*:*:*:*:*:*:*:*
EPSS
Процентиль: 42%
0.00488
Низкий
6.6 Medium
CVSS3
Дефекты
CWE-94
Связанные уязвимости
CVSS3: 6.6
ubuntu
около 2 лет назад
RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted payload and escalate privileges allowing execution of any commands on the remote system.
CVSS3: 6.6
debian
около 2 лет назад
RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an ...
CVSS3: 9.8
altlinux
около 2 лет назад
ALT-PU-2024-12153: package `zoneminder` update to version 1.36.34-alt1
EPSS
Процентиль: 42%
0.00488
Низкий
6.6 Medium
CVSS3
Дефекты
CWE-94