CVE-2012-0261

EPSS 86.45%
Published 31.12.2013 20:55:04
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action.

Affected products Warnungen 0 Metrics 2 CWE 1 References 9

Data is provided by the National Vulnerability Database (NVD)

Op5 ≫ Monitor Version <= 5.5.1

Op5 ≫ Monitor Version5.3.5

Op5 ≫ Monitor Version5.4.0

Op5 ≫ Monitor Version5.4.2

Op5 ≫ Monitor Version5.5.0

Op5 ≫ System-portal Version <= 1.6.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	86.45%	0.993

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://seclists.org/fulldisclosure/2012/Jan/62

http://secunia.com/advisories/47417

Vendor Advisory

http://www.ekelow.se/file_uploads/Advisories/ekelow-aid-2012-01.pdf

http://www.op5.com/news/support-news/fixed-vulnerabilities-op5-monitor-op5-appliance/

http://www.osvdb.org/78064

https://bugs.op5.com/view.php?id=5094

https://nvd.nist.gov/vuln/detail/CVE-2012-0261

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-0261

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-0261

EUVD