Описание
Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request.
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:netgear:dc112a_firmware:1.0.0.64:*:*:*:*:*:*:*
cpe:2.3:h:netgear:dc112a:-:*:*:*:*:*:*:*
EPSS
Процентиль: 82%
0.01713
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-78
Связанные уязвимости
CVSS3: 9.8
github
11 месяцев назад
Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request.
EPSS
Процентиль: 82%
0.01713
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-78