Lucene search
HistoryAug 26, 2024 - 3:15 a.m.
CVE-2024-8073
input validation
command injection
hillstone networks web application firewall
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
38.2%
Improper Input Validation vulnerability in Hillstone Networks Hillstone Networks Web Application Firewall on 5.5R6 allows Command Injection.This issue affects Hillstone Networks Web Application Firewall: from 5.5R6-2.6.7 through 5.5R6-2.8.13.
Affected configurations
Node
hillstonenetweb_application_firewallMatch5.5r6-2.6.7
ORhillstonenetweb_application_firewallMatch5.5r6-2.8.13
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hillstonenet | web_application_firewall | 5.5r6-2.6.7 | cpe:2.3:a:hillstonenet:web_application_firewall:5.5r6-2.6.7:*:*:*:*:*:*:* |
| hillstonenet | web_application_firewall | 5.5r6-2.8.13 | cpe:2.3:a:hillstonenet:web_application_firewall:5.5r6-2.8.13:*:*:*:*:*:*:* |
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
38.2%
Related for NVD:CVE-2024-8073