PT-2022-10322
CVE-2021-34111
·
تاريخ النشر
2022-05-20
·
تاريخ التحديث
2022-07-12
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Thecus 4800Eco (affected versions not specified)
Description
A command injection issue was discovered via the
username parameter in the "/adm/setmain.php" API endpoint. This allows for potential command execution. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾