Описание
A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality of the file httpd_debug.asp. The manipulation of the argument Time leads to os command injection. The exploit has been disclosed to the public and may be used.
Ссылки
- Broken Link
- VDB EntryPermissions Required
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Product
- Broken Link
Уязвимые конфигурации
Одновременно
EPSS
5.5 Medium
CVSS3
9.8 Critical
CVSS3
5.2 Medium
CVSS2
Дефекты
Связанные уязвимости
A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality of the file httpd_debug.asp. The manipulation of the argument Time leads to os command injection. The exploit has been disclosed to the public and may be used.
Уязвимость микропрограммного обеспечения маршрутизаторов D-Link DI-7300G+, связанная с непринятием мер по нейтрализации специальных элементов при обработке asp-файла httpd_debug.asp, позволяющая нарушителю выполнить произвольные команды
EPSS
5.5 Medium
CVSS3
9.8 Critical
CVSS3
5.2 Medium
CVSS2