Lucene search
HistoryDec 15, 2006 - 10:28 p.m.
CVE-2006-6597
cve-2006-6597
argument injection vulnerability
hyperaccess 8.4
remote code execution
telnet uri
security vulnerability
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.072 Low
EPSS
Percentile
94.1%
Argument injection vulnerability in HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript and commands via the /r option in a telnet:// URI, which is configured to use hawin32.exe.
Affected configurations
Node
hilgraevehyperaccessMatch8.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| hilgraeve:hyperaccess | hilgraeve hyperaccess | eq | 8.4 |
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.072 Low
EPSS
Percentile
94.1%
Related for CVE-2006-6597