Shibby Tomato wanoptions sub_40F88C os command injection
38Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 8.6
exploitation probability
—
observed exploitation
nono source reports it
1 public exploit(s)
A security flaw has been discovered in Shibby Tomato 1.28.0000. This affects the function sub_40F88C of the file /tmp/ppp/wanoptions. The manipulation of the argument ppp_custom results in os command injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. This project is superseded by FreshTomato.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
Shibby · Tomatopublic PoCs found — 1
cve_referencegitee.com/WH-YHUST/tomato-rc-qos-ppp-cve/blob/master/advisories/en/03-sub_40F88C-pppd.mdunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.