CVE-2015-7901

Опубликовано: 28 окт. 2015

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors.

Ссылки

https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02
Patch
Third Party Advisory
US Government Resource
https://www.exploit-db.com/exploits/42698/
https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02
Patch
Third Party Advisory
US Government Resource
https://www.exploit-db.com/exploits/42698/

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:infinite_automation_systems:mango_automation:2.5.0:*:*:*:*:*:*:*

cpe:2.3:a:infinite_automation_systems:mango_automation:2.5.5:*:*:*:*:*:*:*

cpe:2.3:a:infinite_automation_systems:mango_automation:2.6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05496

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-78

Связанные уязвимости

GHSA-cmj6-phxg-4vx7

github

больше 3 лет назад