Логотип exploitDog
bind:CVE-2025-70161
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-70161

Количество 2

Количество 2

nvd логотип

CVE-2025-70161

около 1 месяца назад

EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection. This arises because the pppUserName field is directly passed to a shell command via the system() function without proper sanitization. An attacker can exploit this by injecting malicious commands into the pppUserName field, allowing arbitrary code execution.

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-44vp-c93r-6656

около 1 месяца назад

EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection. This arises because the pppUserName field is directly passed to a shell command via the system() function without proper sanitization. An attacker can exploit this by injecting malicious commands into the pppUserName field, allowing arbitrary code execution.

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-70161

EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection. This arises because the pppUserName field is directly passed to a shell command via the system() function without proper sanitization. An attacker can exploit this by injecting malicious commands into the pppUserName field, allowing arbitrary code execution.

CVSS3: 9.8
0%
Низкий
около 1 месяца назад
github логотип
GHSA-44vp-c93r-6656

EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection. This arises because the pppUserName field is directly passed to a shell command via the system() function without proper sanitization. An attacker can exploit this by injecting malicious commands into the pppUserName field, allowing arbitrary code execution.

CVSS3: 9.8
0%
Низкий
около 1 месяца назад

Уязвимостей на страницу