CVE-2023-43321

Опубликовано: 04 окт. 2023

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

File Upload vulnerability in Digital China Networks DCFW-1800-SDC v.3.0 allows an authenticated attacker to execute arbitrary code via the wget function in the /sbin/cloudadmin.sh component.

Ссылки

https://github.com/Push3AX/vul/blob/main/DCN/DCFW_1800_SDC_CommandInjection.md
Exploit
Third Party Advisory
https://www.dcnetworks.com.cn/goods/61.html
Product
https://github.com/Push3AX/vul/blob/main/DCN/DCFW_1800_SDC_CommandInjection.md
Exploit
Third Party Advisory
https://www.dcnetworks.com.cn/goods/61.html
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dcnetworks:dcfw-1800-sdc_firmware:3.0:*:*:*:*:*:*:*

cpe:2.3:h:dcnetworks:dcfw-1800-sdc:-:*:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00229

Низкий

8.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

GHSA-jm9x-vwg9-6pj8