同じ製品で同じ時期に公表された 2 件の脆弱性の 1 つです。まとめた解説: Qihoo 360の6機種に脆弱性、攻撃コード公開・修正版未確認
重大
10.0
A vulnerability was found in Qihoo 360 D603-2, D600-2, D606-6 and D706 up to 6.4.9. This affects...
CVE-2026-121607
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
A vulnerability was found in Qihoo 360 D603-2, D600-2, D606-6 and D706 up to 6.4.9. This affects the function testspeed_command of the file /fs2/bin/iscm. Performing a manipulation of the argument host results in os command injection. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
出典: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
参照URL
- web vuldb.com
- web vuldb.com
- web vuldb.com
- web vuldb.com
- web gist.github.com
- web nvd.nist.gov
- web github.com