地图 / Format String Vulnerability in the EdgeSwitch restricted CLI

Format String Vulnerability in the EdgeSwitch restricted CLI

代码执行 / Use of Externally-Controlled Format String / #311884

厂商: Ubiquiti Inc.
严重程度: 中危 · CVSS 7.2
赏金: —
弱点: Use of Externally-Controlled Format String
研究员: @maxpl0it
披露日期: 2018-06-19
资产: EdgeMAX
CVE: —

该报告还没有中文解读。

时间线

2018-02-03报告提交
2018-06-19公开披露

阅读 HackerOne 原文 ↗作者 @maxpl0it · 版权归作者与 Ubiquiti Inc. 所有

同类报告

CVE-2022-40604: Apache Airflow: Format String VulnerabilityInternet Bug Bounty · 2025-01-18 · $8,000 Exploitable Format String Vulnerability in curl_mfprintf Functioncurl · 2024-11-06 INI Format string injection in Revive Adserver 6.0.4 settingsRevive Adserver · 2026-01-14 Format string vulnerability, curl_msnprintf() functioncurl · 2025-02-20 Translation discovery crashes on crafted filenames (regex substitution injection)Weblate · 2026-10-30 ██████████ running a vulnerable log4jU.S. Dept Of Defense · 2022-01-19