Lucene search

K
nvd[email protected]NVD:CVE-2022-36509
HistoryAug 25, 2022 - 2:15 p.m.

CVE-2022-36509

2022-08-2514:15:11
CWE-78
web.nvd.nist.gov
3
h3c gr3200
minigr1b0v100r014
command injection
dell2tplnslist
vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.8%

H3C GR3200 MiniGR1B0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.

Affected configurations

Nvd
Node
h3cgr3200_firmwareMatchminigr1b0v100r014
AND
h3cgr3200Match-
VendorProductVersionCPE
h3cgr3200_firmwareminigr1b0v100r014cpe:2.3:o:h3c:gr3200_firmware:minigr1b0v100r014:*:*:*:*:*:*:*
h3cgr3200-cpe:2.3:h:h3c:gr3200:-:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.8%

Related for NVD:CVE-2022-36509