الرئيسية
الرئيسية
الاتجاهات
الاتجاهات
الثغرات
الثغرات
الأخبار
الأخبار
الباحثون
الباحثون
لماذا dbugs؟
لماذا dbugs؟
الإعدادات

Mah Chia Hui

باحث منGovtech
#36581من 60,594
8إجمالي CVSS
الثغرات · 1
PT-2024-29472
2024-04-26
8.0
CVE-2024-4163
Skylab
Skylab Igx Iiot Gateway
The Skylab IGX IIoT Gateway has a security issue where the limited shell terminal process runs under root privileges, allowing an attacker to read, write, and modify any file in the operating system. This can be achieved by utilizing the limited shell file exec and download functions. An attacker can replace the /etc/passwd file with a new root user entry, enabling them to breakout from the limited shell and login to an unrestricted shell with root access. With root access, the attacker can take full control of the IIoT Gateway.