CVE-2008-1331

2008-04-0220:44:00

CWE-20

[email protected]

web.nvd.nist.gov

omnipcx office

remote code execution

shell metacharacters

cve-2008-1331

vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.946 High

EPSS

Percentile

99.3%

JSON

cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other versions, allows remote attackers to execute arbitrary commands and “obtain OXO resources” via shell metacharacters in the id2 parameter.

Affected configurations

NVD

Node

alcatel-lucentomnipcx_officeRange210–210\/091.001

alcatel-lucentomnipcx_officeRange610–610\/014.001

CPENameOperatorVersion
alcatel-lucent:omnipcx_officealcatel-lucent omnipcx officelt210\/091.001
alcatel-lucent:omnipcx_officealcatel-lucent omnipcx officelt610\/014.001