Описание
Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:buffalo:ls210d_firmware:1.78-0.03:*:*:*:*:*:*:*
cpe:2.3:h:buffalo:ls210d:-:*:*:*:*:*:*:*
EPSS
Процентиль: 81%
0.0147
Низкий
7.2 High
CVSS3
Дефекты
CWE-78
CWE-78
Связанные уязвимости
CVSS3: 7.2
github
около 2 лет назад
Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root.
EPSS
Процентиль: 81%
0.0147
Низкий
7.2 High
CVSS3
Дефекты
CWE-78
CWE-78