CVE-2025-64127: CVE-2025-64127: işletim sistemi komut enjeksiyonu

Açıklama (NVD)

An OS command injection vulnerability exists due to insufficient sanitization of user-supplied input. The application accepts parameters that are later incorporated into OS commands without adequate validation. This could allow an unauthenticated attacker to execute arbitrary commands remotely.

Özet bilgiler

CVSS v3.1

10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVSS v4.0

10 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

%2,32 (yüzdelik 84)

CWE

CWE-78

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• wiki.zenitel.com
• www.cisa.gov
• CWE-78