Описание
A vulnerability has been identified in RUGGEDCOM ROX II family (All versions < V2.17.0). During the Dynamic DNS configuration of the affected product it is possible to inject additional configuration parameters. Under certain circumstances, an attacker could leverage this vulnerability to spawn a reverse shell and gain root access on the affected system.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Одновременно
EPSS
7.5 High
CVSS3
8.8 High
CVSS3
Дефекты
Связанные уязвимости
A vulnerability has been identified in RUGGEDCOM ROX II family (All versions < V2.17.0). During the Dynamic DNS configuration of the affected product it is possible to inject additional configuration parameters. Under certain circumstances, an attacker could leverage this vulnerability to spawn a reverse shell and gain root access on the affected system.
Уязвимость службы DDNS микропрограммного обеспечения платформ маршрутизации и коммутации RUGGEDCOM ROX II, позволяющая нарушителю повысить свои привилегии
EPSS
7.5 High
CVSS3
8.8 High
CVSS3