Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-5196

Опубликовано: 22 мая 2024
Источник: nvd
CVSS3: 4.7
CVSS3: 7.2
CVSS2: 5.8
EPSS Низкий

Описание

A vulnerability classified as critical has been found in Arris VAP2500 08.50. This affects an unknown part of the file /tools_command.php. The manipulation of the argument cmb_header/txt_command leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265833 was assigned to this vulnerability.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:arris:vap2500_firmware:08.50:*:*:*:*:*:*:*
cpe:2.3:h:arris:vap2500:-:*:*:*:*:*:*:*

EPSS

Процентиль: 49%
0.00256
Низкий

4.7 Medium

CVSS3

7.2 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 4.7
github
больше 1 года назад

A vulnerability classified as critical has been found in Arris VAP2500 08.50. This affects an unknown part of the file /tools_command.php. The manipulation of the argument cmb_header/txt_command leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265833 was assigned to this vulnerability.

EPSS

Процентиль: 49%
0.00256
Низкий

4.7 Medium

CVSS3

7.2 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-77