Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-35850

Опубликовано: 18 сент. 2023
Источник: nvd
CVSS3: 7.2
EPSS Низкий

Описание

SUNNET WMPro portal's file management function has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege or a privileged account can exploit this vulnerability to inject and execute arbitrary system commands to perform arbitrary system operations or disrupt service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:sun.net:wmpro:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 45%
0.00225
Низкий

7.2 High

CVSS3

Дефекты

CWE-78
CWE-78

Связанные уязвимости

CVSS3: 7.2
github
больше 2 лет назад

SUNNET WMPro portal's file management function has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege or a privileged account can exploit this vulnerability to inject and execute arbitrary system commands to perform arbitrary system operations or disrupt service.

EPSS

Процентиль: 45%
0.00225
Низкий

7.2 High

CVSS3

Дефекты

CWE-78
CWE-78