Описание
Privilege escalation vulnerability in the saTECH BCU firmware version 2.1.3. An attacker with access to the CLI of the device could make use of the nice command to bypass all restrictions and elevate privileges as a superuser.
Ссылки
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:arteche:satech_bcu_firmware:2.1.3:*:*:*:*:*:*:*
cpe:2.3:h:arteche:satech_bcu:-:*:*:*:*:*:*:*
EPSS
Процентиль: 39%
0.00173
Низкий
8.8 High
CVSS3
Дефекты
CWE-269
Связанные уязвимости
CVSS3: 8.8
github
11 месяцев назад
Privilege escalation vulnerability in the saTECH BCU firmware version 2.1.3. An attacker with access to the CLI of the device could make use of the nice command to bypass all restrictions and elevate privileges as a superuser.
EPSS
Процентиль: 39%
0.00173
Низкий
8.8 High
CVSS3
Дефекты
CWE-269