CVE-2012-0262 op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password paramete...
HighCVSS 10.0
EPSS 72.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| op5 monitor | <= 5.5.1 | No fix listed |
| op5 monitor | = 5.3.5 | No fix listed |
| op5 monitor | = 5.4.0 | No fix listed |
| op5 monitor | = 5.4.2 | No fix listed |
| op5 monitor | = 5.5.0 | No fix listed |
| op5 system-op5config | <= 2.0.2 | No fix listed |
References
- 20120107 OP5 Monitor - Multiple Vulnerabilities mailing-list
- 47417 third-party-advisory vendor-advisory
- www.ekelow.se exploit
- www.op5.com
- 78065 vdb-entry
- bugs.op5.com