Rconfig Vulnerabilidad

Cronología

Versión

3.9.4	17
3.9.2	14
3.9.5	12
3.9.3	11
3.9.0	10

Contramedidas

Official Fix	12
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	33

Explotabilidad

High	1
Functional	1
Proof-of-Concept	8
Unproven	0
Not Defined	35

Vector de acceso

Not Defined	0
Physical	0
Local	2
Adjacent	11
Network	32

Autenticación

Not Defined	0
High	0
Low	31
None	14

La interacción del usuario

Not Defined	0
Required	4
None	41

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	4
≤6	2
≤7	8
≤8	19
≤9	10
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	4
≤6	4
≤7	12
≤8	14
≤9	9
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	3
≤5	5
≤6	11
≤7	13
≤8	12
≤9	1
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	3
≤7	1
≤8	7
≤9	14
≤10	11

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	7
<2k	26
<5k	12
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar hoy

<1k	44
<2k	1
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

Affected Versions (103): 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 3.6, 3.7, 3.8, 3.9, 3.9.1, 3.9.2, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 3.10, 3.11, 3.12, 3.13, 3.14, 3.15, 3.16, 3.17, 3.18, 3.19, 3.20, 3.21, 3.22, 3.23, 3.24, 3.25, 3.26, 3.27, 3.28, 3.29, 3.30, 3.31, 3.32, 3.33, 3.34, 3.35, 3.36, 3.37, 3.38, 3.39, 3.40, 3.41, 3.42, 3.43, 3.44, 3.45, 3.46, 3.47, 3.48, 3.49, 3.50, 3.51, 3.52, 3.53, 3.54, 3.55, 3.56, 3.57, 3.58, 3.59, 3.60, 3.61, 3.62, 3.63, 3.64, 3.65, 3.66, 3.67, 3.68, 3.69, 3.70, 3.71, 3.72, 3.73, 3.74, 3.75, 3.76, 3.77, 3.78, 3.79, 3.80, 3.81, 3.82, 3.83, 3.84, 3.85, 3.86, 3.87, 3.88, 3.89, 3.90, 3.91, 3.92, 3.93, 3.94, 6.8

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2023-08-01	7.1	7.0	rconfig URL ajaxGetFileByPath.php escalada de privilegios	$0-$5k	$0-$5k	Not Defined	Not Defined	0.07	CVE-2023-39110
2023-08-01	7.1	7.0	rconfig URL compareClass.php doDiff escalada de privilegios	$0-$5k	$0-$5k	Not Defined	Not Defined	0.07	CVE-2023-39108
2023-08-01	7.1	7.0	rconfig compareClass.php doDiff escalada de privilegios	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-39109
2023-04-15	7.1	7.0	rConfig ajaxCompareGetCmdDates.php sql injection	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-45030
2023-03-28	3.5	3.2	rConfig HTTP Request divulgación de información	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2023-24366
2022-11-17	7.1	6.9	rConfig PHP File escalada de privilegios	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.04	CVE-2022-44384
2021-10-11	3.5	3.2	rConfig divulgación de información	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2021-29006
2021-10-11	6.3	5.7	rConfig MySQL Server sql injection	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2021-29004
2021-10-11	8.8	8.0	rConfig CHMOD Command escalada de privilegios	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2021-29005
2021-08-21	6.3	6.0	rConfig Connection escalada de privilegios	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-25353