CN
CyberNewsUz
Threat Intelligence Portal
LOADING0%
CyberNewsUz
Threat Intelligence Portal
CyberNewsUz
Threat Intelligence Portal
10.0.0.50 orqali proshivkaga ega NETGEAR DGN2200 qurilmalaridagi dnslookup.cgi autentifikatsiya qilingan masofadan turib foydalanuvchilarga HTTP POST so‘rovining host_name maydonidagi qobiq meta-belgilari orqali ixtiyoriy OS buyruqlarini bajarish imkonini beradi, bu CVE-2017-6077 dan farqli zaiflikdir.
Vendor
Netgear
Product
Dgn2200 Series Firmware
CVSS Score
8.8
Nashr sanasi
6-mar, 2017
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H