漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Binardat 10G08-0800GSM Network Switch Traceroute CLI Command Injection
Vulnerability Description
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerability in the traceroute diagnostic function of the affected device web management interface. By injecting the %1a character into the hostname parameter, an authenticated attacker with access to the web interface can execute arbitrary CLI commands on the device.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
Binardat 10G08-0800GSM 操作系统命令注入漏洞
Vulnerability Description
Binardat 10G08-0800GSM是中国Binardat公司的一款高性能交换机。 Binardat 10G08-0800GSM network switch firmware V300SP10260209及之前版本存在操作系统命令注入漏洞,该漏洞源于traceroute诊断功能中存在命令注入,可能导致执行任意CLI命令。
CVSS Information
N/A
Vulnerability Type
N/A