From 9286957dee8eb3db2cb2b8d9cdadaef9a034c822 Mon Sep 17 00:00:00 2001 From: MostInterestingBotInTheWorld <98333686+MostInterestingBotInTheWorld@users.noreply.github.com> Date: Thu, 12 May 2022 10:26:10 -0400 Subject: [PATCH] Enhancement: cnvd/2019/CNVD-2019-19299.yaml by mp --- cnvd/2019/CNVD-2019-19299.yaml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/cnvd/2019/CNVD-2019-19299.yaml b/cnvd/2019/CNVD-2019-19299.yaml index 86ad86ae1f..c40f9129ce 100644 --- a/cnvd/2019/CNVD-2019-19299.yaml +++ b/cnvd/2019/CNVD-2019-19299.yaml @@ -1,12 +1,18 @@ id: CNVD-2019-19299 info: - name: Zhiyuan A8 Arbitrary File Write (RCE) + name: Zhiyuan A8 - Remote Code Execution author: daffainfo severity: critical + description: Zhiyuan A8 is susceptible to remote code execution because of an arbitrary file write issue. reference: - https://www.cxyzjd.com/article/guangying177/110177339 - https://github.com/sectestt/CNVD-2019-19299 + classification: + cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H + cvss-score: 10.0 + cve-id: + cwe-id: CWE-77 tags: zhiyuan,cnvd,cnvd2019,rce requests: @@ -45,3 +51,5 @@ requests: - 'contains(body_1, "htmoffice operate")' - 'contains(body_2, "Windows IP")' condition: and + +# Enhanced by mp on 2022/05/12