Логотип exploitDog
bind:CVE-2023-36498
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-36498

Количество 3

Количество 3

nvd логотип

CVE-2023-36498

около 2 лет назад

A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability and gain access to an unrestricted shell.

CVSS3: 7.2
EPSS: Низкий
github логотип

GHSA-mj59-82hp-pgf4

около 2 лет назад

A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability and gain access to an unrestricted shell.

CVSS3: 7.2
EPSS: Низкий
fstec логотип

BDU:2024-01348

около 2 лет назад

Уязвимость PPTP-клиента микропрограммного обеспечения VPN-маршрутизатора TP-Link ER7206 Omada, позволяющая нарушителю выполнить произвольные команды

CVSS3: 7.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-36498

A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability and gain access to an unrestricted shell.

CVSS3: 7.2
1%
Низкий
около 2 лет назад
github логотип
GHSA-mj59-82hp-pgf4

A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability and gain access to an unrestricted shell.

CVSS3: 7.2
1%
Низкий
около 2 лет назад
fstec логотип
BDU:2024-01348

Уязвимость PPTP-клиента микропрограммного обеспечения VPN-маршрутизатора TP-Link ER7206 Omada, позволяющая нарушителю выполнить произвольные команды

CVSS3: 7.2
1%
Низкий
около 2 лет назад

Уязвимостей на страницу