Логотип exploitDog
bind:CVE-2022-33313
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-33313

Количество 3

Количество 3

nvd логотип

CVE-2022-33313

больше 3 лет назад

Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/action/import_https_cert_file/` API is affected by command injection vulnerability.

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-5h82-g2m2-rmrv

больше 3 лет назад

Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/action/import_https_cert_file/` API is affected by command injection vulnerability.

CVSS3: 9.8
EPSS: Низкий
fstec логотип

BDU:2022-04773

больше 3 лет назад

Уязвимость реализации функции import_https_cert_file() микропрограммного обеспечения VPN-маршрутизаторов Robustel R1510, позволяющая нарушителю выполнить произвольные команды

CVSS3: 9.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-33313

Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/action/import_https_cert_file/` API is affected by command injection vulnerability.

CVSS3: 9.8
4%
Низкий
больше 3 лет назад
github логотип
GHSA-5h82-g2m2-rmrv

Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/action/import_https_cert_file/` API is affected by command injection vulnerability.

CVSS3: 9.8
4%
Низкий
больше 3 лет назад
fstec логотип
BDU:2022-04773

Уязвимость реализации функции import_https_cert_file() микропрограммного обеспечения VPN-маршрутизаторов Robustel R1510, позволяющая нарушителю выполнить произвольные команды

CVSS3: 9.1
4%
Низкий
больше 3 лет назад

Уязвимостей на страницу