Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4mc4-2f89-r5fj

Опубликовано: 16 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.6

Описание

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.

8.6 High

CVSS4

Дефекты

CWE-78

Связанные уязвимости

nvd
2 дня назад

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.

8.6 High

CVSS4

Дефекты

CWE-78