Lucene search

[email protected]CVE-2008-6816

HistoryMay 28, 2009 - 2:30 p.m.

CVE-2008-6816

2009-05-2814:30:00

CWE-287

[email protected]

web.nvd.nist.gov

eaton mgeops

network shutdown module

cve-2008-6816

remote code execution

security vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.115 Low

EPSS

Percentile

95.3%

JSON

Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via pane_actionbutton.php, and then executing this action via exec_action.php.

Affected configurations

NVD

Node

eatonnetwork_shutdown_moduleRange≤3.1_beta

eatonnetwork_shutdown_moduleMatch2.6

eatonnetwork_shutdown_moduleMatch3.0

eatonnetwork_shutdown_moduleMatch3.02

eatonnetwork_shutdown_moduleMatch3.04

CPENameOperatorVersion
eaton:network_shutdown_moduleeaton network shutdown modulele3.1_beta
eaton:network_shutdown_moduleeaton network shutdown moduleeq2.6
eaton:network_shutdown_moduleeaton network shutdown moduleeq3.0
eaton:network_shutdown_moduleeaton network shutdown moduleeq3.02
eaton:network_shutdown_moduleeaton network shutdown moduleeq3.04

CPE	Name	Operator	Version
eaton:network_shutdown_module	eaton network shutdown module	le	3.1_beta
eaton:network_shutdown_module	eaton network shutdown module	eq	2.6
eaton:network_shutdown_module	eaton network shutdown module	eq	3.0
eaton:network_shutdown_module	eaton network shutdown module	eq	3.02
eaton:network_shutdown_module	eaton network shutdown module	eq	3.04

References

download.mgeops.com/install/win32/nsm/release_note_nsm_320.txt

osvdb.org/50051

secunia.com/advisories/32456

www.nruns.com/security_advisory_eaton_mge_ops_network_shutdown_module_authentication_bypass.php

www.securityfocus.com/archive/1/497824/100/100/threaded

www.securityfocus.com/bid/31933

exchange.xforce.ibmcloud.com/vulnerabilities/46131

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.115 Low

EPSS

Percentile

95.3%

JSON

Related for CVE-2008-6816

nessus1 cvelist1 nvd1 prion1