Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qhhf-33w5-r488

Опубликовано: 16 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/M9000 VP R6.01.01 to R6.03.02, which may allow an attacker who can access the computer where the affected product is installed to execute an arbitrary OS command by altering a file generated using Graphic Builder.

OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/M9000 VP R6.01.01 to R6.03.02, which may allow an attacker who can access the computer where the affected product is installed to execute an arbitrary OS command by altering a file generated using Graphic Builder.

EPSS

Процентиль: 67%
0.00542
Низкий

7.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7.8
nvd
почти 4 года назад

OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 to R4.03.00, and B/M9000 VP R6.01.01 to R6.03.02, which may allow an attacker who can access the computer where the affected product is installed to execute an arbitrary OS command by altering a file generated using Graphic Builder.

CVSS3: 6.6
fstec
почти 4 года назад

Уязвимость функции Standard Operation and Monitoring распределенных систем управления CENTUM VP и CENTUM VP Entry Class, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 67%
0.00542
Низкий

7.8 High

CVSS3

Дефекты

CWE-78