9.8
CVE-2013-2571
- EPSS 62.05%
- Veröffentlicht 28.01.2020 15:15:14
- Zuletzt bearbeitet 21.11.2024 01:51:58
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginIris 3.8 before build 1548, as used in Xpient point of sale (POS) systems, allows remote attackers to execute arbitrary commands via a crafted request to TCP port 7510, as demonstrated by opening the cash drawer.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hcomm ≫ Xpient Iris Version <= 3.8
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 62.05% | 0.983 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.