CVE-2019-16072

Katalog CVE

CVSS 9.8 · Critical EPSS 25,9%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada netsas enigma network management solution. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execute arbitrary code because of improper neutralization of shell metacharacters in the ip_address variable within an snmp_browser action.

Rincian

Terbit di NVD

20 Maret 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

25,9% peluang dieksploitasi; lebih tinggi dari 97,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.mogozobo.com/?p=3647 exploit · advisory pihak ketiga