Логотип exploitDog
bind:CVE-2021-36707
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-36707

Количество 2

Количество 2

nvd логотип

CVE-2021-36707

больше 4 лет назад

In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page parameter value of ledonoff contains a trivial command injection where the value of the led_cmd parameter is passed directly to do_system.

CVSS3: 9.8
EPSS: Средний
github логотип

GHSA-f8hv-38c8-7mr9

больше 3 лет назад

In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page parameter value of ledonoff contains a trivial command injection where the value of the led_cmd parameter is passed directly to do_system.

EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-36707

In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page parameter value of ledonoff contains a trivial command injection where the value of the led_cmd parameter is passed directly to do_system.

CVSS3: 9.8
12%
Средний
больше 4 лет назад
github логотип
GHSA-f8hv-38c8-7mr9

In ProLink PRC2402M V1.0.18 and older, the set_ledonoff function in the adm.cgi binary, accessible with a page parameter value of ledonoff contains a trivial command injection where the value of the led_cmd parameter is passed directly to do_system.

12%
Средний
больше 3 лет назад

Уязвимостей на страницу