PT-2023-31300 · Unknown · Wrc-X3000Gs
CVSS v3.1
6.8
Média
| Vetor | AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
WRC-X3000GSN version 1.0.2
WRC-X3000GS versions 1.0.24 and earlier
WRC-X3000GSA versions 1.0.24 and earlier
Description
The issue allows a network-adjacent attacker with administrative privilege to execute an arbitrary OS command by sending a specially crafted request to the product.
Recommendations
For WRC-X3000GSN version 1.0.2, update to a version later than 1.0.2 to resolve the issue.
For WRC-X3000GS versions 1.0.24 and earlier, update to a version later than 1.0.24 to resolve the issue.
For WRC-X3000GSA versions 1.0.24 and earlier, update to a version later than 1.0.24 to resolve the issue.
Correção
OS Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Wrc-X3000Gs