← volver
CVE-2021-37384

CVE-2021-37384

CVSS 9.8 CRITICALEPSS 1.4%CWE-94
RCE (Remote Code Execution) vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to send arbitrary commands to the device via web interface.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://cwe.mitre.org/data/definitions/94.htmlhttps://gist.githubusercontent.com/LuigiPolidorio/9fe61cf2edee63152161ffc52c39f6cd/raw/529cf49103e0fdf4eeb970fa1f62fa508ebe7c3c/reference.txthttps://owasp.org/www-community/attacks/Code_Injectionhttps://www.softwall.com.br/cves/publicacao-rce-html-injection-furukawa/