Логотип exploitDog
bind: "CVE-2025-4008"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2025-4008"

Количество 3

Количество 3

nvd логотип

CVE-2025-4008

28 дней назад

The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulnerable to command injection. Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.

EPSS: Низкий
github логотип

GHSA-g7h8-28jj-qxmf

28 дней назад

The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulnerable to command injection. Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.

EPSS: Низкий
fstec логотип

BDU:2025-06319

4 месяца назад

Уязвимость сценария template.cgi веб-интерфейса микропрограммного обеспечения метеостанций Meteobridge, позволяющая нарушителю обойти ограничения безопасности, повысить свои привилегии и выполнить произвольные команды

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-4008

The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulnerable to command injection. Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.

4%
Низкий
28 дней назад
github логотип
GHSA-g7h8-28jj-qxmf

The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulnerable to command injection. Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.

4%
Низкий
28 дней назад
fstec логотип
BDU:2025-06319

Уязвимость сценария template.cgi веб-интерфейса микропрограммного обеспечения метеостанций Meteobridge, позволяющая нарушителю обойти ограничения безопасности, повысить свои привилегии и выполнить произвольные команды

CVSS3: 8.8
4%
Низкий
4 месяца назад

Уязвимостей на страницу