Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-9833
HistoryJun 24, 2017 - 2:29 a.m.

Design/Logic Flaw

2017-06-2402:29:00
PRIOn knowledge base
www.prio-n.com
3

7.3 High

AI Score

Confidence

Low

0.735 High

EPSS

Percentile

98.1%

DISPUTED /cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of “…/…” using the FILECAMERA variable (sent by GET) to read files with root privileges. NOTE: multiple third parties report that this is a system-integrator issue (e.g., a vulnerability on one type of camera) because Boa does not include any wapopen program or any code to read a FILECAMERA variable.

CPENameOperatorVersion
boaeq0.94.14.21

7.3 High

AI Score

Confidence

Low

0.735 High

EPSS

Percentile

98.1%