Описание
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the log viewing function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.0.0.r20044 (исключая)
Одновременно
cpe:2.3:o:inhandnetworks:ir915l-fq39-s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:inhandnetworks:ir915l-fq39-s:-:*:*:*:*:*:*:*
Конфигурация 2Версия до 1.0.0.r20044 (исключая)
Одновременно
cpe:2.3:o:inhandnetworks:ir912l-fq58_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:inhandnetworks:ir912l-fq58:-:*:*:*:*:*:*:*
EPSS
Процентиль: 82%
0.02307
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-77
Связанные уязвимости
CVSS3: 9.8
github
2 месяца назад
InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the log viewing function. This vulnerability allows remote attackers to execute arbitrary commands as root via a crafted input.
EPSS
Процентиль: 82%
0.02307
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-77