CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
84.0%
This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system.
Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code on targeted system.
Vendor | Product | Version | CPE |
---|---|---|---|
esds.co | emagic_data_center_management | * | cpe:2.3:a:esds.co:emagic_data_center_management:*:*:*:*:*:*:*:* |
[
{
"vendor": "ESDS",
"product": "Emagic Data Center Management Suite",
"versions": [
{
"status": "affected",
"version": "0",
"lessThanOrEqual": "V6.0",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
]