Описание
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall.
Ссылки
- Vendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 5.0 (включая) до 5.12 (исключая)
cpe:2.3:o:kerlink:keros:*:*:*:*:*:*:*:*
EPSS
Процентиль: 37%
0.0016
Низкий
8.1 High
CVSS3
Дефекты
CWE-94
Связанные уязвимости
CVSS3: 8.1
github
2 месяца назад
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall.
EPSS
Процентиль: 37%
0.0016
Низкий
8.1 High
CVSS3
Дефекты
CWE-94