Goby/json/TamronOS-IPTV-ping-RCE.json

42 lines
946 B
JSON
Raw Normal View History

2022-11-25 02:08:58 -08:00
{
"Name": "TamronOS IPTV ping RCE",
"Description": "There is an arbitrary command execution vulnerability in the api/ping of tamronos IPTV system, through which attackers can execute arbitrary commands",
"Product": "TamronOS IPTV",
"Homepage": "http://www.tamronos.com/",
"DisclosureDate": "2021-06-15",
"Author": "PeiQi",
"GobyQuery": "title=\"TamronOS IPTV系统\"",
"Level": "3",
"Impact": "<p>RCE</p>",
"Recommendation": "Update",
"References": [
"http://wiki.peiqi.tech"
],
"HasExp": true,
"ExpParams": [
{
"name": "Cmd",
"type": "input",
"value": "id"
}
],
"ScanSteps": [
"AND"
],
"ExploitSteps": null,
"Tags": [
"RCE"
],
"CVEIDs": null,
"CVSSScore": "0.0",
"AttackSurfaces": {
"Application": [
"TamronOS IPTV"
],
"Support": null,
"Service": null,
"System": null,
"Hardware": null
},
"Recommandation": "<p>undefined</p>"
}