Описание
TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the do_setNTP function. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request.
Ссылки
- ExploitThird Party Advisory
- Broken LinkVendor Advisory
- ExploitThird Party Advisory
- Broken LinkVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:trendnet:tew-815dap_firmware:1.0.2.0:*:*:*:*:*:*:*
cpe:2.3:h:trendnet:tew-815dap:-:*:*:*:*:*:*:*
EPSS
Процентиль: 43%
0.00211
Низкий
6.4 Medium
CVSS3
Дефекты
CWE-77
Связанные уязвимости
CVSS3: 6.4
github
почти 2 года назад
TRENDnet TEW-815DAP 1.0.2.0 is vulnerable to Command Injection via the do_setNTP function. An authenticated attacker with administrator privileges can leverage this vulnerability over the network via a malicious POST request.
EPSS
Процентиль: 43%
0.00211
Низкий
6.4 Medium
CVSS3
Дефекты
CWE-77