Описание
A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute arbitrary commands within the context of the system.
Уязвимые конфигурации
Конфигурация 1Версия до 7.0.9281 (включая)Версия до 1.2.5.23 (включая)
Одновременно
Одно из
cpe:2.3:a:mitel:mivoice_office_400:*:*:*:*:*:*:*:*
cpe:2.3:o:mitel:mivoice_office_400_smb_controller_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mitel:mivoice_office_400_smb_controller:-:*:*:*:*:*:*:*
EPSS
Процентиль: 73%
0.00785
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-77
CWE-77
Связанные уязвимости
CVSS3: 9.8
github
больше 2 лет назад
A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute arbitrary commands within the context of the system.
EPSS
Процентиль: 73%
0.00785
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-77
CWE-77