Описание
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application builds shell commands with caller-provided strings and executes them. An attacker could influence the executed command, potentially resulting in command injection and full system compromise.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
EPSS
7.4 High
CVSS3
7.8 High
CVSS3
Дефекты
Связанные уязвимости
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application builds shell commands with caller-provided strings and executes them. An attacker could influence the executed command, potentially resulting in command injection and full system compromise.
Уязвимость комплекта для разработки программного обеспечения SICAM SIAPP SDK, связанная с некорректным внешним управлением именем или путем файла, позволяющая нарушителю выполнить произвольные команды
EPSS
7.4 High
CVSS3
7.8 High
CVSS3