GHSA-3cc6-hwr4-f668CriticalCVSS 9.6
Attackers can exploit command injection vulnerabilities to delete core system runtime files,...
🔗 CVE IDs covered (1)
📋 Description
Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyzed; simultaneously, they can obtain root privileges to steal configuration passwords such as SNMP, thereby tampering with critical system parameters and triggering abnormal operation of the entire power system.