POJIA破甲
地图 / Command injection in the process of downloading the latest version of the cloud key firmware through the unifi management software.

Command injection in the process of downloading the latest version of the cloud key firmware through the unifi management software.

代码执行 / 命令注入(通用) / #183458

厂商
Ubiquiti Inc.
严重程度
中危 · CVSS 8.3
赏金
—
弱点
命令注入(通用)
研究员
@dblack
披露日期
2017-12-11
资产
—
CVE
—

该报告还没有中文解读。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @dblack · 版权归作者与 Ubiquiti Inc. 所有

同类报告

H1514 Remote Code Execution on kitcrm using bulk customer update of Priority ProductsShopify · 2020-02-06Remote Code Execution on www.semrush.com/my_reports on Logo uploadSemrush · 2019-06-24Git flag injection - local file overwrite to remote code executionGitLab · 2019-12-19 · $12,000Privilege Escalation From user to SYSTEM via unauthenticated command executionUbiquiti Inc. · 2019-11-08BAD Code !Paragon Initiative Enterprises · 2016-11-04Local files could be overwritten in GitLab, leading to remote command executionGitLab · 2019-07-17 · $12,000