PT-2023-27147
CVE-2023-3991
·
تاريخ النشر
2023-10-16
·
تاريخ التحديث
2023-10-20
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
FreshTomato version 2023.3
Description
An OS command injection issue exists in the httpd iperfrun.cgi functionality. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this issue.
Recommendations
For FreshTomato version 2023.3, at the moment, there is no information about a newer version that contains a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾