Design/Logic Flaw

2023-11-2107:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

web-based management

command injection

remote attacker

system control

root privileges

7.8 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

18.0%

JSON

A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full system control. Those commands are executed with root privileges. The vulnerability is located in the user request handling of the web-based management.

CPENameOperatorVersion
0852-0602_firmwareeq< 1.0.6.s0
0852-0603_firmwareeq< 1.0.6.s0
0852-1605_firmwareeq< 1.2.5.s0

Name	Operator	Version
0852-0602_firmware	eq	< 1.0.6.s0
0852-0603_firmware	eq	< 1.0.6.s0
0852-1605_firmware	eq	< 1.2.5.s0

References

cert.vde.com/en/advisories/VDE-2023-037