Логотип exploitDog
bind:CVE-2024-46888
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-46888

Количество 3

Количество 3

nvd логотип

CVE-2024-46888

около 1 года назад

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly sanitize user provided paths for SFTP-based file up- and downloads. This could allow an authenticated remote attacker to manipulate arbitrary files on the filesystem and achieve arbitrary code execution on the device.

CVSS3: 9.9
EPSS: Средний
github логотип

GHSA-qf2g-86hc-xp38

около 1 года назад

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly sanitize user provided paths for SFTP-based file up- and downloads. This could allow an authenticated remote attacker to manipulate arbitrary files on the filesystem and achieve arbitrary code execution on the device.

CVSS3: 9.9
EPSS: Средний
fstec логотип

BDU:2024-10307

около 1 года назад

Уязвимость модуля SFTP программного обеспечения для управления сетевой инфраструктурой SINEC INS (Infrastructure Network Services), позволяющая нарушителю выполнить произвольный код

CVSS3: 9.9
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-46888

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly sanitize user provided paths for SFTP-based file up- and downloads. This could allow an authenticated remote attacker to manipulate arbitrary files on the filesystem and achieve arbitrary code execution on the device.

CVSS3: 9.9
15%
Средний
около 1 года назад
github логотип
GHSA-qf2g-86hc-xp38

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly sanitize user provided paths for SFTP-based file up- and downloads. This could allow an authenticated remote attacker to manipulate arbitrary files on the filesystem and achieve arbitrary code execution on the device.

CVSS3: 9.9
15%
Средний
около 1 года назад
fstec логотип
BDU:2024-10307

Уязвимость модуля SFTP программного обеспечения для управления сетевой инфраструктурой SINEC INS (Infrastructure Network Services), позволяющая нарушителю выполнить произвольный код

CVSS3: 9.9
15%
Средний
около 1 года назад

Уязвимостей на страницу