PT-2017-19318
CVE-2017-9980
·
تاريخ النشر
2017-07-21
·
تاريخ التحديث
2020-12-31
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb
Description
The issue concerns command injection via the
pip parameter in the PING feature, also known as tag ipPing, within the web interface.Recommendations
For Green Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb, as a temporary workaround, consider disabling the
PING feature until a patch is available. Avoid using the pip parameter in the affected web interface until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾