CVE-2024-8166

26 Ago 2024

Título es

CVE-2024-8166

Lun, 26/08/2024 – 15:15

Tipo

CWE-434

Gravedad v2.0

5.80

Gravedad 2.0 Txt

MEDIUM

Título en

CVE-2024-8166

Descripción en

A vulnerability has been found in Ruijie EG2000K 11.1(6)B2 and classified as critical. This vulnerability affects unknown code of the file /tool/index.php?c=download&a=save. The manipulation of the argument content leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

26/08/2024

Vector CVSS:3.1

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Vector CVSS:2.0

AV:N/AC:L/Au:M/C:P/I:P/A:P

Gravedad 3.1 (CVSS 3.1 Base Score)

4.70

Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)

MEDIUM

Referencias

https://github.com/qiuhuihk/cve/blob/main/ruijie.md

https://vuldb.com/?ctiid_275764=