CVE-2012-3001

2012-10-2216:55:01

CWE-78

certcc

web.nvd.nist.gov

cve-2012-3001

mutiny standard

command injection

vulnerability

network-interface menu

remote execution

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.244

Percentile

96.7%

JSON

Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, related to a “command injection vulnerability.”

Affected configurations

Nvd

Node

mutinystandardRange≤4.5-1.10

mutinystandardMatch4.4-1.12

mutinystandardMatch4.5-1.03

mutinystandardMatch4.5-1.05

mutinystandardMatch4.5-1.07

VendorProductVersionCPE
mutinystandard*cpe:2.3:a:mutiny:standard:*:*:*:*:*:*:*:*
mutinystandard4.4-1.12cpe:2.3:a:mutiny:standard:4.4-1.12:*:*:*:*:*:*:*
mutinystandard4.5-1.03cpe:2.3:a:mutiny:standard:4.5-1.03:*:*:*:*:*:*:*
mutinystandard4.5-1.05cpe:2.3:a:mutiny:standard:4.5-1.05:*:*:*:*:*:*:*
mutinystandard4.5-1.07cpe:2.3:a:mutiny:standard:4.5-1.07:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mutiny	standard	*	cpe:2.3:a:mutiny:standard::::::::
mutiny	standard	4.4-1.12	cpe:2.3:a:mutiny:standard:4.4-1.12:::::::*
mutiny	standard	4.5-1.03	cpe:2.3:a:mutiny:standard:4.5-1.03:::::::*
mutiny	standard	4.5-1.05	cpe:2.3:a:mutiny:standard:4.5-1.05:::::::*
mutiny	standard	4.5-1.07	cpe:2.3:a:mutiny:standard:4.5-1.07:::::::*