CVE-2023-47167 in ER7206 Omada Gigabit VPN Router정보

요약

\~에 의해 MITRE • 2024. 02. 06.

A post authentication command injection vulnerability exists in the GRE policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

책임이 있는

Talos

예약하다

2023. 11. 07.

공개

2024. 02. 06.

모더레이션

수락

항목

VDB-253041

CPE

준비됨

CWE

CWE-78 (확인됨)

CVSS

7.2 (CNA)

EPSS

0.00781

KEV

아니요

활동

매우 낮음

부문

Industry, Homeoffice, ...

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2023-47167
NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-47167
CVE Details	https://www.cvedetails.com/cve/CVE-2023-47167/

◂ 이전 개요 다음 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!