Логотип exploitDog
bind:CVE-2022-45440
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-45440

Количество 3

Количество 3

nvd логотип

CVE-2022-45440

около 3 лет назад

A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0, which processes symbolic links on external storage media. A local authenticated attacker with administrator privileges could abuse this vulnerability to access the root file system by creating a symbolic link on external storage media, such as a USB flash drive, and then logging into the FTP server on a vulnerable device.

CVSS3: 4.4
EPSS: Низкий
github логотип

GHSA-rpwq-xw4m-459x

около 3 лет назад

A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0, which processes symbolic links on external storage media. A local authenticated attacker with administrator privileges could abuse this vulnerability to access the root file system by creating a symbolic link on external storage media, such as a USB flash drive, and then logging into the FTP server on a vulnerable device.

CVSS3: 4.4
EPSS: Низкий
fstec логотип

BDU:2023-00607

около 3 лет назад

Уязвимость микропрограммного обеспечения маршрутизаторов Zyxel AX7501-B0, связанная с использованием файлов и каталогов, доступных внешним сторонам, позволяющая нарушителю получить доступ к корневой файловой системе

CVSS3: 4.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-45440

A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0, which processes symbolic links on external storage media. A local authenticated attacker with administrator privileges could abuse this vulnerability to access the root file system by creating a symbolic link on external storage media, such as a USB flash drive, and then logging into the FTP server on a vulnerable device.

CVSS3: 4.4
0%
Низкий
около 3 лет назад
github логотип
GHSA-rpwq-xw4m-459x

A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0, which processes symbolic links on external storage media. A local authenticated attacker with administrator privileges could abuse this vulnerability to access the root file system by creating a symbolic link on external storage media, such as a USB flash drive, and then logging into the FTP server on a vulnerable device.

CVSS3: 4.4
0%
Низкий
около 3 лет назад
fstec логотип
BDU:2023-00607

Уязвимость микропрограммного обеспечения маршрутизаторов Zyxel AX7501-B0, связанная с использованием файлов и каталогов, доступных внешним сторонам, позволяющая нарушителю получить доступ к корневой файловой системе

CVSS3: 4.4
0%
Низкий
около 3 лет назад

Уязвимостей на страницу