9.3

CVE-2007-3572

Exploit

EPSS 7%
Veröffentlicht 05.07.2007 20:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Incomplete blacklist vulnerability in cgi-bin/runDiagnostics.cgi in the web interface on the Yoggie Pico and Pico Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the param parameter, as demonstrated by URL encoded "`" (backtick) characters (%60 sequences).

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Yoggie ≫ Pico

Yoggie ≫ Pico Pro

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	7%	0.909

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0020.html

Exploit

http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0092.html

http://osvdb.org/37808

http://secunia.com/advisories/25902

Vendor Advisory

Exploit

http://www.securityfocus.com/bid/24743

Exploit

http://www.vupen.com/english/advisories/2007/2417

https://exchange.xforce.ibmcloud.com/vulnerabilities/35208

https://nvd.nist.gov/vuln/detail/CVE-2007-3572

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-3572

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-3572

EUVD