CVE-2015-7901

2015-10-2810:59:21

CWE-78

icscert

web.nvd.nist.gov

cve-2015-7901

infinite automation mango automation

os command execution

remote authenticated users

security vulnerability

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.057

Percentile

93.4%

JSON

Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors.

Affected configurations

Nvd

Node

infinite_automation_systemsmango_automationMatch2.5.0

infinite_automation_systemsmango_automationMatch2.5.5

infinite_automation_systemsmango_automationMatch2.6.0

VendorProductVersionCPE
infinite_automation_systemsmango_automation2.5.0cpe:2.3:a:infinite_automation_systems:mango_automation:2.5.0:*:*:*:*:*:*:*
infinite_automation_systemsmango_automation2.5.5cpe:2.3:a:infinite_automation_systems:mango_automation:2.5.5:*:*:*:*:*:*:*
infinite_automation_systemsmango_automation2.6.0cpe:2.3:a:infinite_automation_systems:mango_automation:2.6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
infinite_automation_systems	mango_automation	2.5.0	cpe:2.3:a:infinite_automation_systems:mango_automation:2.5.0:::::::*
infinite_automation_systems	mango_automation	2.5.5	cpe:2.3:a:infinite_automation_systems:mango_automation:2.5.5:::::::*
infinite_automation_systems	mango_automation	2.6.0	cpe:2.3:a:infinite_automation_systems:mango_automation:2.6.0:::::::*