CVE Daily

CVE-2012-0261

license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance befor...

Critical CVSS 10.0

Overview

license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the timestamp parameter for an install action.

CWE: CWE-94 Published: 2013-12-31T20:55:04.133
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 10.0 (CRITICAL)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags