CVE-2012-0261

EPSS 86.45%
Veröffentlicht 31.12.2013 20:55:04
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Op5 ≫ Monitor Version <= 5.5.1

Op5 ≫ Monitor Version5.3.5

Op5 ≫ Monitor Version5.4.0

Op5 ≫ Monitor Version5.4.2

Op5 ≫ Monitor Version5.5.0

Op5 ≫ System-portal Version <= 1.6.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	86.45%	0.993

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://seclists.org/fulldisclosure/2012/Jan/62

http://secunia.com/advisories/47417

Vendor Advisory

http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf

http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/

http://www.osvdb.org/78064

https://bugs.op5.com/view.php?id=5094

https://nvd.nist.gov/vuln/detail/CVE-2012-0261

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-0261

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-0261

EUVD