CVE-2023-33381

Опубликовано: 06 июн. 2023

Источник: nvd

CVSS3: 7.2

EPSS Средний

Описание

A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router (firmware version AR_g5.8_110WVN0b7_2). The vulnerability allows an authenticated user to execute arbitrary OS commands by sending specially crafted input to the router via the ping function.

Ссылки

http://gpt-2741gnac.com
Broken Link
http://mitrastar.com
Broken Link
https://github.com/duality084/CVE-2023-33381-MitraStar-GPT-2741GNAC/blob/main/README.md
Exploit
Third Party Advisory
http://gpt-2741gnac.com
Broken Link
http://mitrastar.com
Broken Link
https://github.com/duality084/CVE-2023-33381-MitraStar-GPT-2741GNAC/blob/main/README.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:mitrastar:gpt-2741gnac_firmware:ar_g5.8_110wvn0b7_2:*:*:*:*:*:*:*

cpe:2.3:h:mitrastar:gpt-2741gnac:-:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.58012

Средний

7.2 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

GHSA-cx2x-582w-9g9w