| ଶୀର୍ଷକ | EnGenius ENS500-AC 3.7.20 Command Injection |
|---|
| ବର୍ଣ୍ଣନା | Engenius multiple devices /admin/network/diag_nslookup interface has a command injection vulnerability, after the user logs in to the device, the diag_nslookup parameters command injection, the final system can successfully execute the command, can directly obtain system permissions. |
|---|
| ଉତ୍ସ | ⚠️ https://k9u7kv33ub.feishu.cn/wiki/RURswTkepiuKCzkGMd2cA1M2nNc |
|---|
| ଉପଭୋକ୍ତା | liutong (UID 76264) |
|---|
| ଦାଖଲ | 11/18/2024 02:26 PM (1 ବର୍ଷ ago) |
|---|
| ମଧ୍ୟମ ଧରଣର | 11/24/2024 04:14 PM (6 days later) |
|---|
| ସ୍ଥିତି | ଗ୍ରହଣ କରାଯାଇଛି |
|---|
| VulDB ଏଣ୍ଟ୍ରି | 285978 [EnGenius ENH1350EXT/ENS500-AC/ENS620EXT ଯେପର୍ଯ୍ୟନ୍ତ 20241118 diag_nslookup ବିସ୍ତାରିତ ଅଧିକାର] |
|---|
| ପଏଣ୍ଟ | 18 |
|---|